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wireless  rollouts  and  discuss  future  needs,  page  s 
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KNOWLEDGE  CENTER  HARDWARE 

Multiple 
Cores. 
Multiple 
Challenges 

Dual-core  chips  from 
Intel  and  AMD  debuted 
in  April  and  are  headed 
toward  your  IT  oper¬ 
ation.  They’re  fast,  but  they  could  put 
the  double-whammy  on  your  software 
licensing  costs.  Our  in-depth  analysis 
begins  on  page  47. 
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O  Online:  Get  up  to  speed  on  the  new  multicore 
chips  with  our  latest  webcast.  QuickLink  a6150 


Large  Users  Hope  for  Broader 
Adoption  of  Usability  Standard 


International  vote 
seen  as  boost  for 
software  test  specs 

BY  PATRICK  THIBODEAU 

Badly  designed  software  is 
costing  businesses  millions  of 
dollars  annually  because  it’s 


difficult  to  use,  requires  exten¬ 
sive  training  and  support,  and 
is  so  frustrating  that  many  end 
users  underutilize  applica¬ 
tions,  say  IT  officials  at  com¬ 
panies  such  as  The  Boeing  Co. 
and  Fidelity  Investments. 

Despite  those  problems, 
most  CIOs  remain  unaware  of 


a  3-year-old  standard  designed 
to  help  IT  managers  compare 
the  usability  of  software  prod¬ 
ucts,  Boeing’s  Keith  Butler  and 
Fidelity’s  Thomas  Tullis  both 
said  last  week. 

But  they  and  others  believe 
that  will  change  once  the 
guidelines  for  reporting  us¬ 
ability  test  results  are  ap¬ 
proved  as  a  worldwide  stan¬ 
dard  by  the  International  Stan¬ 
dards  Organization  in  Geneva. 
The  ISO’s  technology  stan¬ 
dards  committee  voted  late 
last  month  to  accept  the  stan- 
Usability,  page  10 


MORE  NEWS  ONLINE 

Go  to  our  Web  site  for  full  coverage  of 
IT  spending  issues: 

QuickLink  a2120 
www.computerworld.com 


Toward  Risk 
Management  I 


Regulatory  mandates  and  mounting  threat 
of  security  breaches  are  spurring  initiatives 


BY  THOMAS  HOFFMAN 

NEW  YORK 

Regulatory  compliance  bur¬ 
dens,  coupled  with  a  series  of 
highly  publicized  data  securi¬ 
ty  breaches,  are  leading  a 
growing  number  of  compa¬ 
nies  to  strengthen  their  IT 
and  business  risk  man¬ 
agement  practices,  said 
attendees  at  a  confer¬ 
ence  here  last  week. 

For  instance,  recent 
customer  data  breaches 
involving  companies 
such  as  Citigroup  Inc.  and 
ChoicePoint  Inc.  prompted 
ABN  Amro  Bank  NV  to  re¬ 
evaluate  its  data  protection 
policies,  said  Joe  Bernick, 
head  of  Americas  technolo¬ 
gy  risk  management  at  the 


Amsterdam-based  bank. 

As  part  of  that  effort,  ABN 
Amro  is  considering  what 
data  needs  to  be  encrypted 
and  is  weighing  the  risks  as¬ 
sociated  with  storing  encryp¬ 
tion  keys  off-site  with  the 
data,  he  said. 

“We  need  to  under¬ 
stand  those  risks  — 
that’s  a  key  initiative,” 
said  Bernick,  a  speaker 
at  the  IT  risk  man¬ 
agement  conference, 
which  was  organized 
by  Robert  Frances  Group  Inc., 
a  Westport,  Conn.-based  IT 
research  and  consulting  firm. 

Such  security  concerns  are 
particularly  acute  in  the  fi¬ 
nancial  services  industry, 

Risk,  page  66 
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Storage  Security  Gains  Spotlight 


Net  App  seeks  data 
protection  edge  via 
purchase  of  start-up 

BY  LUCAS  MEARIAN 

Network  Appliance  Inc.  last 
week  said  it  intends  to  buy 
start-up  vendor  Decru  Inc. 
for  $272  million,  giving  legiti¬ 
macy  to  the  small  but  fast¬ 
growing  market  for  storage 
security  products. 


The  move  comes  on  the 

! 

heels  of  several  high-profile 
data  thefts  and  losses  in  the 
financial  services  industry 
and  other  vertical  markets. 

Those  incidents  have  spurred 
some  IT  shops  to  begin  de¬ 
ploying  technology  for  en¬ 
crypting  archived  data. 

NetApp  user  Chris  Hughes 
said  the  deal  will  prompt  him 
to  take  a  close  look  at  Decru’s 
NetApp,  page  66 
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Make  a  name  for  yourself 
with  Windows  Server  System 


Microsoft 


Your  potential.  Our  passion.' 

Microsoft 


An  upgrade  to  Microsoft  Windows  Server  System 
made  it  possible  for  50,000  worldwide  employees 
at  Nissan  Motor  Company  to  have  more  secure 
remote  access  to  their  e-mail  and  calendars  from 
any  Internet  connection,  without  the  hassle  and 
expense  of  a  VPN.  Here's  how:  By  deploying 
Windows  Server  2003  and  Exchange  2003,  not 
only  did  Nissan  IT  meet  the  CEO's  demand  for 
better  global  collaboration,  they  expect  to 
save  at  least  $135  million  by  streamlining  their 
messaging  infrastructure.  To  get  the  full  Nissan 
story  or  find  a  Microsoft  Certified  Partner, 
go  to  microsoft.com/wssystem 


"At  Nissan,  we  expect  to  save  at  least  $135 
million  annually  thanks  to  the  efficiencies 
that  Windows  Server  2003  and  Exchange 
Server  2003  are  helping  us  achieve." 


Toshihiko  Suda 

Senior  Manager,  Nissan  Motor  Company,  Ltd. 


Windows  Server  System  '  includes: 


Server  Platform 

Windows  Server’" 

Virtualization 

Virtual  Server 

Data  Management  &  Analysis 

SQL  Server 

Communications 

Exchange  Server 

Portals  &  Collaboration 

Office  SharePoint*  Portal  Server 

Integration 

BizTalk'  Server 

Management 

Systems  Management  Server 

Microsoft*  Operations  Manager 

Security 

Internet  Security  &  Acceleration  Server 

Plus  other  software  products 
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NAME 


Mr.  50,000  Global 
Remote  and  Mobile 
Users  Connected 
Without  a  VPN. 


NISSAN 


EMC 


where  information  lives 


Fr:  I  need  training  to  install  this 


To:  my  intern  installed  this 
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EMC2 


VELOCITY2 

PARTNER 

PROGRAM 


EMC  CLARiiON®  CHANGES  THE  WAY  YOU  THINK  ABOUT  STORAGE.  Announcing  the  CLARiiON  AX 
With  the  quality  and  high  availability  that  CLARiiON  is  known  for.  In  a  smaller  package  that’s 
any  business.  It’s  powerful,  yet  simple  to  manage.  SAN  ready.  User  installable.  With  replication  ar 
management  functionality.  All  at  a  price  that’s  equally  small,  starting  at  $5,999.  To  learn  more,  visit 
www.EMC.com/backup.  Or  call  1-866-464-7381. 


Find  an  authorized  EMC  Velocity2  Partner  at  www.EMC.com/velocity. 


EMC,2  EMC,  CLARiiON,  and  where  information  lives  are  registered  trademarks  of  EMC  Corporation.  ©  2004  EMC*  Corporation.  All  rights  reserved. 


COKIEKTS 


Redefining  Disaster 

In  the  Management  section:  Recent 
world  events  have  made  companies 
and  CIOs  refocus  on  disaster  recovery 
—  and  they’re  finding  it  ain’t  what  it 
used  to  be.  Page  39 


Crossroads  for  VB8  Users 

In  the  Technology  section:  Companies  with  lots  of  applica¬ 
tions  written  in  Visual  Basic  6  must  consider  their  options: 
Migrate  them,  or  replace,  rewrite  or  reuse  them?  The  best 
approach  often  depends  on  the  quality  of  the  VB6  code 
and  the  experience  of  the  development  staff.  Page  25 
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4  The  feds  are  unprepared  for 

new  kinds  of  cyberthreats,  a 
GAO  report  warns. 

5  Mobile  &  Wireless  World: 

The  need  for  better  device 
management  tools  and  the 
prospect  of  handhelds  that 
support  video  applications 
were  hot  topics  at  Computer- 
world’  s  conference. 

6  IBM  unveils  Opteron-based 
blades  for  scientific  apps. 

6  CVS  deploys  RFID-enabled 
terminals  for  processing  pay¬ 
ments  in  its  pharmacies. 
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Link  code  pointing 
to  additional,  relat¬ 
ed  content  on  our 
Web  site.  Just  en¬ 
ter  that  code  into 
our  QuickLink  box, 
which  you'll  see  at 
the  top  of  each 
pageonoursite. 
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8  On  the  Mark:  Mark  Hall 

reports  on  a  new  product 
designed  to  help  distinguish 
between  employees  trying  to 
connect  to  a  wireless  network 
and  external  “war  chalkers.” 

22  Don  Tennant  knows  that 
many  readers  disagree,  but  he 
still  thinks  a  consistent,  quan¬ 
tifiable  means  of  document¬ 
ing  the  skills  of  your  IT 
organization  is  necessary. 

22  David  Moschella  sees  signs 
that  the  standardized  PC  con¬ 
figuration  is  about  to  be  re¬ 
placed  at  many  companies. 

23  Virginia  Robbins  thinks  that 
IT  done  well  has  become  a 
commodity;  the  next  step  is 
doing  IT  well  with  a  consis¬ 
tent  message. 

35  Robert  L.  Mitchell  laments 
that  vendors  are  looking  for  a 
payoff  instead  of  contributing 
intellectual  property  to  stan¬ 
dards  efforts  royalty-free. 

44  Barbara  Gomolski  sees  valu¬ 
able  lessons  in  recent  data 
security  failures. 

68  Frankly  Speaking:  Frank 
Hayes  shares  his  readers’ 
doubts  about  end-user  ma¬ 
chines  whose  disk  drives 
automatically  encrypt  data. 
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KN0WIED6E CENTER 
HARDWARE 

Multiple  Cores, 

Multiple  Challenges 

EDITOR’S  NOTE:  This  special 
report  takes  an  in-depth 
look  at  the  performance 
benefits  of  multicore  chips, 
as  well  as  the  challenges 
they  present  for  program¬ 
ming  and  software 
licensing.  PACKAGE 
BEGINS  ON  PAGE  47. 
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48  Counting  Cores,  The  need  for 
speed  is  driving  development  of 
multicore  processors,  which  pack 
two  or  more  complete,  indepen¬ 
dent  CPUs  onto  a  single  chip.  That 
innovation  greatly  speeds  commu¬ 
nication  between  CPUs  and  cuts 
waiting  time. 
Plus,  we  take 
a  look  at  what 
major  vendors 
are  offering 
and  future 
designs  that 
are  pushing 
toward  hun¬ 
dreds  of  cores. 


52  Pricing  Penalty? 

There’s  little 
doubt  that  the  in¬ 
dustry  is  quickly 
moving  toward  multicore  technol¬ 
ogy,  but  IBM,  Microsoft  and  Ora¬ 
cle  are  each  taking  a  different  ap¬ 
proach  to  licensing  software  for  it. 
That  leaves  IT  executives  like 
Southwire  Co.’s  Chris  Easterwood 
questioning  whether  to  adopt  the 
new  technology. 

56  Mass- 
Market 
Multicore. 

i  Most  server 
software  is 
already  multi¬ 
threaded,  but 
IT  developers 
will  need  to 
learn  to  opti¬ 
mize  desktop 
software  and  partition  applications 
as  multicore  chips  go  mainstream. 

58  The  Almanac.  A  Taiwanese  hard¬ 
ware  maker  comes  up  with  a  faster 
way  to  boot  up  Windows.  And  a 
survey  indicates  that  blade  servers 
could  make  up  35%  of  server  pur¬ 
chases  in  three  years. 

60  Opinion:  Upgrading 
computers  just  to  get 
faster  microprocessors  is 
so  yesterday  —  and  so 
tomorrow,  says  Mark  Hall. 
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Handling  the  Hard¬ 
ware  Revolution. 

These  are  fast-moving 
times  for  business 
computing  hardware. 
Get  up  to  speed  on  the 
latest  trends  in  chips, 
64-bit  systems  and 


i 
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BJ’s  Settles  FTC 
Data  Fraud  Charges 

BJ’s  Wholesale  Club  Inc.  has 
agreed  to  settle  Federal  Trade 
Commission  charges  that  it  im¬ 
properly  stored  and  failed  to  en¬ 
crypt  customer  credit  and  debit 
card  numbers  kept  on  store  com¬ 
puters.  The  data  was  stolen  by 
identity  thieves  to  make  fraudu¬ 
lent  credit  cards.  The  settlement 
requires  BJ’s  to  implement  a 
comprehensive  data  security  pro¬ 
gram  and  conduct  biannual  secu¬ 
rity  audits  for  20  years. 


Power  Outage  Halts 
CheckFree  Services 

Customers  trying  to  use  online 
bill-payment  services  through 
CheckFree.com  were  deterred  by 
a  power  outage  that  knocked  the 
service  off-line  for  about  14  hours 
last  week.  CheckFree  Corp., 
which  operates  just  one  data  cen¬ 
ter,  said  that  its  emergency  plans 
worked  as  designed.  Any  cus¬ 
tomers  charged  late  fees  by  their 
banks  or  other  vendors  as  a  result 
of  the  power  outage  will  be  reim¬ 
bursed,  the  company  said. 


IBM  to  Buy  Maker 
Of  Mainframe  Tools 

IBM  said  it’s  acquiring  partner  Iso- 
gon  Corp.,  a  maker  of  mainframe 
asset  management  software.  It 
plans  to  add  Isogon’s  technology 
into  its  Tivoli  line  of  systems  man¬ 
agement  software.  IBM  has  been 
reselling  Isogon’s  SoftAudit  for 
z/OS  and  Vista  for  about  a  year  in 
conjunction  with  the  Tivoli  Li¬ 
cense  Manager.  Financial  terms 
of  the  deal  weren’t  disclosed. 


German  Agency 
Offers  Security  Tool 

Germany’s  Federal  Office  for  Se¬ 
curity  in  Information  Technology 
has  developed  an  open-source 
too!  to  test  the  security  of  net¬ 
worked  systems.  The  BSI  Open 
Source  Security  Suite,  available 
at  no  charge,  is  designed  to  check 
core  systems  for  security  weak¬ 
nesses  or  recent  attacks. 


Feds  Unready  for  New 
IT  Threats,  GAO  Says 

Report  warns  that  agencies  need  better 
defenses,  incident  reporting  guidelines 


BY  JAIKUMAR  VIJAYAN 

majority  of  federal 
agencies  appear  to 
be  unprepared  to 
deal  with  relatively 
new  IT  security  threats  such 
as  spyware,  phishing  and 
spam,  according  to  a  report  is¬ 
sued  last  week  by  the  Govern¬ 
ment  Accountability  Office. 

Adding  to  the  problem,  the 
GAO  said,  is  a  lack  of  guid¬ 
ance  on  what,  exactly,  agencies 
need  to  report  about  security 
incidents  involving  those 
threats,  as  well  as  how  and  to 
whom  they  should  report  the 
information.  As  a  result,  the 
government  “is  limited  in  its 
ability  to  identify  and  respond 
to  emerging  cybersecurity 
threats,  including  sophisticat¬ 
ed  and  coordinated  attacks 
that  target  multiple  federal  en¬ 
tities,”  the  report  warned. 

But  some  analysts  said  that 
the  lack  of  readiness  identified 
by  the  GAO  isn’t  very  differ¬ 
ent  from  the  situation  in  the 
private  sector. 

“If  there  was  a  GAO  that 
looked  at  private  companies, 


you  would  find  the  same 
thing,”  said  John  Pescatore,  an 
analyst  at  Gartner  Inc. 

The  issue  that’s  more  spe¬ 
cific  to  government  agencies 
is  the  apparent  absence  of 
guidelines  for  reporting  secu¬ 
rity  incidents,  Pescatore 
added.  “The  GAO  has  found 
that  the  mandates  are  there 
but  the  processes  to  make 
them  work  are  not,”  he  said. 

Common  Challenges 

“Fundamentally,  we  face  the 
same  security  challenges  that 
a  lot  of  corporations  face,”  Lt. 
Col.  Kenneth  Blakely,  chief  of 
the  Army  Knowledge  Online 
(AKO)  portal  for  U.S.  Army 
personnel,  said  in  an  interview 
earlier  this  month  before  the 
GAO  report  was  released. 

Those  challenges  include 
dealing  with  large  volumes 
of  spam,  viruses  and  phishing 
attacks,  Blakely  said.  In  a  bid 
to  address  those  concerns, 
the  portal  unit  last  October 
implemented  technology  from 
IronPort  Systems  Inc.  in  San 
Bruno,  Calif.,  that  lets  it  scan 


more  than  100  million  e-mails 
per  month  —  20%  of  which 
are  found  to  be  spam. 

The  tool  lets  AKO  filter  out 
viruses  and  spam  messages 
and  limit  the  size  of  e-mail  at¬ 
tachments,  Blakely  said.  He 
added  that  the  unit’s  staffers 
also  spend  “a  significant 
amount  of  time”  educating 
end  users  about  phishing. 

The  79-page  GAO  report  is 
based  on  input  from  security 
executives  at  24  federal  agen¬ 
cies.  According  to  the  report, 
agencies,  including  the  FBI 
and  the  Internal  Revenue  Ser¬ 
vice,  have  already  fallen  victim 
to  phishers  (see  box).  Spam 
and  spyware  also  pose  grow¬ 
ing  threats,  the  report  said. 

But,  it  claimed,  most  of  the 
agencies  haven’t  yet  begun  ad¬ 
dressing  the  new  threats  as 
part  of  their  information  secu¬ 
rity  programs,  as  they  are 
mandated  to  do  under  the 
Federal  Information  Security 
Management  Act  (FISMA). 

There  is  also  little  consis¬ 
tency  in  the  manner  in  which 
agencies  report  security  inci¬ 
dents.  Some  notify  the  U.S. 
Department  of  Homeland  Se¬ 
curity’s  U.S.  Computer  Emer¬ 
gency  Readiness  Team  (US- 


Federal  Phishing 


Immigration  and  Customs  En¬ 
forcement:  E-mail  claiming  to  be 
from  an  ICE  agent  referred  users 
to  the  agency’s  Web  site  in  an 

effort  to  steal  money  from  rela¬ 
tives  of  U.S.  soldiers  killed  in  Iraq. 

FBI:  Spoofed  e-mail  asked  users 
to  verify  personal  data  to  avoid 
further  investigation. 

FDIC:  A  message  tried  to  lure  Is 
users  to  a  bogus  Web  site  that 

used  the  FDIC’s  logos,  fonts  and  ,  f 
colors  and  sought  bank  account,  s 
credit  card  and  Social  Security  £ 
numbers.  § 

-  *  '< 

IRS:  Spoofed  e-mail  and  an  offi-  s 
cial-looking  Web  site  were  used  § 
in  an  attempt  to  trick  recipients  > 

into  disclosing  their  personal  and  ■  “ 

financial  data.  T 

■  A 

CERT),  as  required  by  FISMA, 
the  report  said.  Others  send 
incident  reports  to  law  en¬ 
forcement  agencies  or  don’t 
report  security  events  at  all. 

Officials  at  US-CERT  didn’t 
respond  to  calls  seeking  com¬ 
ment  last  week. 

The  GAO’s  report  said 
US-CERT  and  the  White 
House’s  Office  of  Manage¬ 
ment  and  Budget  this  summer 
plan  to  jointly  release  a  set  of 
formal  reporting  guidelines. 

The  OMB  also  plans  to  in¬ 
clude  the  emerging  threats  in 
its  annual  reviews  of  agency 
security  programs,  according 
to  the  report.  ©  55091 


U.K.  Incidents  Show  Shift  to  Targeted  Attacks 


AN  ONGOING  series  of  e-mail 
attacks  against  computer  systems  ; 

in  the  U.K.  highlights  a  trend  in 
which  cybercriminals  are  shifting 
away  from  mass-mailing  worms 
and  viruses  and  focusing  on  more  j 
targeted  sets  of  victims. 

The  U.K.'s  National  Infrastruc-  ! 

ture  Security  Co-ordination  Centre 
last  week  published  a  report  saying  \ 
that  more  than  300  government 
departments  and  businesses  are 
being  buffeted  by  attacks  designed  ! 
to  covertly  gather  data. 

Unlike  tactics  used  in  phishing 
attacks  and  the  wide-scale  mailing 
of  e-mail  worms,  the  attackers  ap-  I 


pear  to  be  targeting  individuals  who  | 
they  believe  have  access  to  privi¬ 
leged  information,  the  report  said. 

It  added  that  the  IP  addresses  and 
e-mail  header  information  used  in 
the  messages  suggest  that  the  at-  | 
tacks  are  originating  in  the  Far  East. 

The  attacks  involve  the  use  of 
e-mails  that  contain  Trojan  horse 
programs  or  links  to  Web  sites  with  | 
Trojan  horse  files  installed  on  them. 
Once  the  Trojan  horses  are  in¬ 
stalled  on  systems,  they  collect 
usernames,  passwords  and  system 
information;  scan  disk  drives;  and 
upload  documents  and  data  to  re¬ 
mote  computers,  the  report  said.  I 


Many  malicious  hackers  are 
starting  to  tailor  their  attacks  to  go 
after  high-value  targets,  said  Mark 
Sunner,  chief  technology  officer  at 
MessageLabs  Ltd.,  a  U.K.-based 
provider  of  e-mail  security  services. 

"Certainly  for  the  last  few  years, 
what  everyone  perceived  to  be  the 
main  issue  was  the  mass-mailing 
worm,”  Sunner  said.  “But  there 
does  seem  to  be  a  new  trend 
where  e-mail  viruses  are  being  cre¬ 
ated  with  the  express  intention  of 
getting  into  specific  organizations.” 

The  disclosure  in  the  U.K.  came 
just  two  weeks  after  police  in  Israel 
said  they  had  uncovered  a  spy  ring  I 


that  allegedly  used  Trojan  software 
to  snoop  into  companies  there 
[QuickLink  54777], 

“It  doesn’t  surprise  me  at  all  that 
these  sorts  of  attacks  are  possi¬ 
ble,”  said  Pete  Lindstrom,  an 
analyst  at  Spire  Security  LLC  in 
Malvern,  Pa.  But  the  new  threat 
shouldn’t  “bother  any  security  pro¬ 
fessional  worth  his  salt,”  Lindstrom 
added.  Standard  precautions  such 
as  updated  antivirus  signatures,  at¬ 
tachment  filtering  and  antispam 
measures  should  be  enough  to 
identify  malicious  messages  and 
mitigate  the  risks,  he  said. 

!  -  Jaikumar  Vijayan 
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Device  Management,  Video 
Eyed  for  Handheld  Systems 


IT  seeks  tools  to 
centrally  manage 
mobile  devices 

BY  MATT  HAMBLEN 

SCOTTSDALE.  ARIZ. 

Improved  wireless  device 
management  tools  and  IP- 
based  video-over-wireless  ap¬ 
plications  were  among  the 
technologies  that  attendees  at 
last  week’s  Mobile  &  Wireless 
World  2005  conference  said 
they  hope  to  see  within  the 
next  few  years. 

The  event,  which  was  orga¬ 
nized  by  Computer-world  and 
attended  by  about  300  IT 
managers,  featured  more  than 
20  case  study  presentations  by 
companies  and  government 
agencies.  But  discussions  also 
focused  on  what  will  come 
next  as  more  companies  link 
database  servers  and  applica¬ 


tions  such  as  e-mail  and  ERP 
systems  to  mobile  devices. 

Several  IT  managers  said 
they’re  looking  for  the  ability 
to  use  embedded  tools  to  cen¬ 
trally  manage  hand¬ 
helds  in  order  to  make 
sure  that  the  devices 
are  secure  and  run¬ 
ning  the  designated 
applications. 

Laura  Amato,  IT 
contracts  manager  at 
PMI  Mortgage  Insur¬ 
ance  Co.  in  Walnut 
Creek,  Calif.,  said 
such  tools  could  pro¬ 
vide  an  additional  level  of  se¬ 
curity  on  top  of  policies  that 
PMI  has  set  to  restrict  the  type 
of  devices  and  applications 
that  can  be  used  by  its  several 
hundred  handheld  users. 

During  a  session  at  the  con¬ 
ference,  Mooly  Eden,  vice 
president  and  general  manag¬ 


er  of  Intel  Corp.’s  mobile  com¬ 
puting  operations,  said  the 
chip  maker  plans  to  introduce 
its  promised  Active  Manage¬ 
ment  Technology  (AMT)  for 
wireless-enabled 
laptops  in  the  next 
two  years. 

“We  will  try  to 
hide  a  little  IT  man¬ 
ager  in  each  note¬ 
book,”  Eden  said  jok¬ 
ingly.  If  a  laptop  is 
attacked  by  a  virus, 
IT  staffers  will  be 
able  to  use  a  wireless 
back  channel  to 
monitor  the  problem  and  send 
software  patches,  even  if  the 
PC  is  disconnected  from  the 
network,  Eden  said. 

Rob  Leach,  Intel’s  world¬ 
wide  marketing  manager  for 
mobile  solutions,  said  AMT 
will  first  appear  in  desktop 
PCs,  then  in  laptops  with 
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Users  Hear  of  Hard  Lessons 
Learned  in  Wireless  Projects 


SCOTTSDALE.  ARIZ. 

MANY  SPEAKERS  at  Comput- 
erworld's  Mobile  &  Wireless 
World  conference  here  imparted 
the  lessons  they  learned  during 
wireless  projects  -  and  some  of 
those  lessons  were  hard  indeed. 

First  and  foremost:  Pick  the 
right  partner. 

Drew  Mazeitis,  director  of  mo¬ 
bile  technology  at  Ferrellgas,  a 
propane  distributor  in  Overland 
Park,  Kan.,  said  it  was  “very  diffi¬ 
cult  to  work  with”  the  first  ven¬ 
dor  his  company  chose  to  help 
implement  a  field  service  wire¬ 
less  system. 

After  a  year  of  working  with 
the  unidentified  vendor,  Ferrell¬ 
gas  recognized  the  magnitude  of 
the  project’s  problems  and  be¬ 
gan  to  work  on  a  parallel  plan. 
That  led  to  a  successful  pilot 
project  that  prompted  it  to 
“dump”  the  first  vendor  and  pick 
a  new  one  that  was  “much  more 
aligned  with  what  we  wanted  to 


do  as  a  business,”  Mazeitis  said. 

Ferrellgas  has  now  completed 
70%  of  a  system  that  wirelessly 
connects  delivery  drivers  to  their 
central  offices,  centralizes  cus¬ 
tomer  information  and  provides 
real-time  metrics  to  monitor  the 
company's  operations. 

Sometimes  the  decision  to 
choose  a  new  partner  is  easier 
to  make,  such  as  when  your  job 
is  at  stake.  That  was  the  situa¬ 
tion  faced  by  Dale  Frantz,  CIO 
at  Auto  Warehousing  Co.  in 
Tacoma,  Wash. 

The  company  experienced 
problems  with  a  wireless  track¬ 
ing  system  installed  at  a  new-car 
processing  plant  in  Tacoma  by  a 
value-added  reseller  (VAR).  The 
problems,  which  included  de¬ 
creasing  wireless  coverage, 
prompted  Auto  Warehousing’s 
CEO  to  threaten  to  cancel  the 
project. 

Frantz  said  he  put  his  job  on 
the  line  by  assuring  the  CEO  that 


the  wireless  project  could  work. 

Getting  it  done  involved  pick¬ 
ing  a  new  VAR,  which  found  that 
antennas  hadn’t  been  sealed 
correctly  and  were  corroded  by 
rain,  resulting  in  the  decreased 
wireless  coverage  areas. 

Even  more  surprising,  the  re¬ 
placement  VAR  discovered  that 
some  of  the  antennas  had  been 
installed  upside-down.  “To  have 
found  the  antennas  upside-down, 
you  want  to  bang  your  head 
against  the  wall,”  Frantz  said. 

Mazeitis  said  Ferrellgas  is 
now  coming  off  one  of  its  best  fi¬ 
nancial  quarters  ever,  managers 
have  better  tools  so  they  can 
handle  more  people,  and  the 
same  amount  of  propane  is  be¬ 
ing  delivered  by  fewer  trucks. 

The  pilot  Tacoma  project  has 
paid  off  for  Auto  Warehousing  in 
reduced  staff,  increased  efficien¬ 
cy  and  even  the  unexpected 
benefit  of  increased  cash  flow, 
Frantz  said. 

Fie  added  that  the  company 
now  plans  to  roll  out  the  wireless 
system  nationwide. 

-  David  Ramel 


wireless  adapters.  Support  for 
handhelds  is  further  off  but  “is 
definitely  envisioned,”  he  said. 

Focus  on  Management 

Many  companies  are  asking 
for  more  handheld  manage¬ 
ment  functions,  such  as  the 
ability  to  remotely  wipe  a  de¬ 
vice  clean  of  data  if  it  is  lost 
or  falls  into  the  wrong  hands, 
said  Christian  Adans,  group 
strategy  director  at  Integrated 
Network  Solutions,  an  integra¬ 
tor  in  Ottignies,  Belgium. 

Microsoft  Corp.  this  month 
announced  updates  to  its  Ex¬ 
change  Server  and  Windows 
Mobile  software  that  will  in¬ 
clude  a  device-wiping  capabil¬ 
ity  and  other  management  fea¬ 
tures  [QuickLink  54962].  Re¬ 
search  In  Motion  Ltd.  already 
provides  such  capabilities  for 
its  BlackBerry  devices,  but 
Adans  noted  that  users  have  to 
install  its  BlackBerry  Enter¬ 
prise  Server  software  to  take 
advantage  of  them. 

For  new  wireless  applica¬ 
tions,  Eden  said  a  dual-core 
CPU  that  Intel  plans  to  release 
early  next  year  as  part  of  its 
Napa  mobile  computing  plat¬ 
form  will  support  voice  over 
IP  as  well  as  videoconferenc¬ 
ing  among  10  end  users. 

Ernie  Park,  CIO  at  Maytag 
Corp.  in  Newton,  Iowa,  said  he 
thinks  videoconferencing  for 
handhelds  could  be  possible 
with  increases  in  the  band¬ 
width  of  wireless  WANs.  That 
would  be  “a  tremendous  appli¬ 
cation”  to  help  improve  com¬ 
munications  with  Maytag’s 
830  field  service  technicians 
and  transmit  technical  draw¬ 
ings  and  other  visual  informa¬ 
tion  via  handhelds,  Park  said. 

But  during  one  session,  John 
Stehman,  an  analyst  at  Robert 
Frances  Group  Inc.  in  West- 
port,  Conn.,  asked  how  many 
of  the  250  or  so  IT  managers 
in  the  audience  would  be  pre¬ 
pared  to  support  video  over 
handhelds  in  the  next  two 
years  if  it  became  available. 
Fewer  than  10  people  raised 
their  hands.  ©  55094 
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MAYTAG  SPENT  about  $6  mil¬ 
lion  to  install  a  mobile  com¬ 
puting  system  for  its  830  field 
service  workers,  said  CIO 
Ernie  Park.  But,  he  added, 
it  expects  to  gain  $13  million 
annually  in  revenue  because 
the  appliance  repair  techni¬ 
cians  can  work  more  efficient¬ 
ly  and  bring  in  more  business. 

Maytag’s  TechConnect  ap¬ 
plication  runs  on  handhelds 
from  Intermec  Technologies 
Corp.  in  Everett,  Wash.,  and 
provides  repair  workers  with 
directions  and  updates  on  ser¬ 
vice  calls.  Park  said  it  can 
also  track  trucks  via  the  Glob¬ 
al  Positioning  System.  Since 

the  rollout  was  — - 

completed  last 

October,  the  av-  ~ 

erage  number  of 
service  calls  *  A 

completed  daily  j 

by  individual 
workers  has  in¬ 
creased  from  5.8 
to  6.4,  he  said. 

A  new  com¬ 
pensation  system 
was  introduced 
along  with  the 
technology:  Maytag  now  pays 
field-service  workers  more  if 
they  reach  a  certain  level  of 
productivity  and  less  if  they 
fall  below  one.  Even  so,  it  took 
until  April  for  workers  to  fully 
accept  the  system,  Park  said. 
“The  technicians  originally 
saw  it  as  a  threat,”  he  noted. 

Saf elite  Auto  Glass  in  Wi¬ 
chita,  Kan.,  rolled  out  a  mobile 
application  for  200  of  its  safe¬ 
ty  glass  installers  in  2003  at 
a  cost  of  $100,000,  using 
Nextel  phones.  By  month’s 
end,  Safelite  plans  to  expand 
the  system  to  2,000  workers, 
who  will  be  equipped  with 
BlackBerry  handhelds.  Rod 
Ghani,  assistant  vice  president 
of  business  development  at 
Safelite,  said  the  initial  de:  : 
ployment  has  yielded  millions 
of  dollars  in  new  revenue  be- 

real-time  information  <  ‘ 
available  jobis 

.  .  '■•■■■  •; 


GHANI:  Safe- 
lite’s  mobile 
app  has  helped 
installers  get 
more  real-time 
data  about 
available  jobs. 
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Aruba  to  Upgrade 
Microsoft  WLAN 

Microsoft  Corp.  has  chosen 
Aruba  Wireless  Networks  Inc. 
to  upgrade  its  global  wireless 
LAN.  Aruba’s  thin  access  points 
and  WLAN  switches  will  replace 
more  than  5,000  Cisco  Aironet 
access  points  at  Microsoft  facili¬ 
ties.  Neither  company  would  dis¬ 
close  the  pact’s  value.  The  WLAN 
will  cover  277  buildings  in  60 
countries  and  support  25,000 
concurrent  users  and  an  estimat¬ 
ed  100,000  devices. 


Thieves  Pilfer  Data 
On  Motorola  Staff 

Two  computers  containing  per¬ 
sonal  information  on  Motorola 
Inc.  employees  were  stolen  from 
the  mobile  phone  maker’s  human 
resources  services  provider.  Affil¬ 
iated  Computer  Services  Inc. 

The  data  on  the  computers  in¬ 
cluded  names  and  Social  Security 
numbers.  Motorola  said.  The 
number  of  employees  affected 
wasn’t  disclosed. 


Seagull  Purchases 
BPM  Toolmaker 

Seagull  Software  Systems  Inc. 
has  signed  an  agreement  to  ac¬ 
quire  Oak  Grove  Systems  Inc.,  a 
privately  held  maker  of  business 
process  management  (BPM)  soft¬ 
ware.  Terms  of  the  deal  weren’t 
disclosed.  With  the  acquisition, 
Oak  Grove’s  Reactor  process  en¬ 
gine  and  tools  will  become  part  of 
Seagull’s  LegaSuite  line  of  ser¬ 
vice-oriented  architecture  tools. 


Trend  Micro  Buys 
Security  Vendor 

Antivirus  and  Web  content  securi¬ 
ty  software  vendor  Trend  Micro 
Inc.  has  acquired  Kelkea  Inc.,  a 
vendor  of  IP  filtering  services. 
Trend  Micro  said  the  acquisition 
will  allow  it  to  offer  network-level 
protection  against  threats  such 
as  phishing,  pharming,  botnet 
attacks  and  spam.  The  companies 
did  not  disclose  the  value  of 
the  deal. 


IBM  Expands  Opteron 
To  Its  Blade  Servers 


Despite  addition,  AMD-based  systems 
will  still  be  marketed  for  scientific  apps 


BY  PATRICK  THIBODEAU 

bm  last  week  extended  its 
use  of  Advanced  Micro 
Devices  Inc.’s  Opteron 
processors  to  blade 
servers.  But  it  said  it  will  con¬ 
tinue  to  aim  systems  based  on 
the  chips  at  high-performance 
scientific  computing  applica¬ 
tions,  not  general  uses. 

The  new  blade,  which  is 
scheduled  to  be  available  next 
month,  will  work  within  IBM’s 
eServer  BladeCenter  chassis 
and  support  regular  Opteron 
chips  as  well  as  the  dual-core 
versions  that  Sunnyvale, 
Calif.-based  AMD  launched  in 
April  [QuickLink  53954], 

One  user  who  plans  to  try 
out  the  LS20  system  is  Jeffrey 
Skolnick,  director  of  the  Cen¬ 
ter  of  Excellence  in  Bioinfor¬ 
matics  at  the  University  at 


Buffalo  in  New  York. 

The  center  has  built  a  clus¬ 
tered  supercomputer  that’s 
used  to  conduct  life  sciences 
research  and  includes  266 
IBM  blades,  each  equipped 
with  two  of  Intel  Corp.’s  Xeon 
chips.  Skolnick  said  that  he 
will  benchmark  the  Opteron 
blades  within  the  next  several 
weeks.  If  he  likes  the  results, 
he  may  mix  and  match  them 
with  the  Xeon-based  ones. 

Performance  Needs 

The  decision  on  whether  to 
expand  the  system  with  the 
Opteron-based  hardware  is  “a 
question  of  performance  — 
how  much  faster  is  it  [com¬ 
pared]  to  the  existing  proces¬ 
sors,”  Skolnick  said.  Cost  is 
also  an  issue,  he  added. 

IBM  has  offered  Opteron- 


New  Hardware 


AMD  Opteron  LS20  for 
IBM  eServer  BladeCenter 

■  Supports  two  single-  or 
dual-core  processors. 

■  Can  be  configured  with  up 
to  8MB  of  memory. 

■  Holds  two  36GB  or  73GB 
internal  disk  drives. 

■  Runs  Red  Hat  Linux, 

SUSE  Linux  and  Windows. 

■  Starts  at  $2,259. 

based  servers  for  nearly  two 
years  and  has  seen  systems 
built  with  the  AMD  chips  used 
primarily  in  high-performance 
research  applications.  Tim 
Dougherty,  director  of  IBM’s 
BladeCenter  line,  said  the 
move  to  add  an  Opteron-based 
blade  offering  was  primarily 
based  on  expanding  the  choic¬ 
es  available  to  customers. 


IBM’s  top  line  of  x86-based 
servers,  the  xSeries,  is  built 
around  Xeon.  Earlier  this  year, 
IBM  said  it  has  invested  more 
than  $100  million  in  develop¬ 
ing  a  hardware  architecture 
called  X3  and  a  chip  set  called 
Hurricane  to  expand  the  func¬ 
tionality  of  the  xSeries  line. 

Gordon  Haff,  an  analyst  at 
Illuminata  Inc.  in  Nashua, 

N.H.,  said  that  IBM  has  been 
criticized  in  the  past  for  trying 
to  support  too  many  technol¬ 
ogies  but  that  it  is  offering 
Opteron  systems  “really  in  re¬ 
sponse  to  specific  needs  in 
high-performance  computing.” 

In  contrast  to  IBM,  competi¬ 
tors  Hewlett-Packard  Co.  and 
Sun  Microsystems  Inc.  have 
been  aggressive  about  incor¬ 
porating  Opteron  into  general- 
purpose  servers,  said  Charles 
King,  an  analyst  at  Pund-IT 
Research  in  Hayward,  Calif. 

But,  King  noted,  users  often 
surprise  vendors  by  taking 
technology  intended  for  one 
type  of  use  and  applying  it  to 
another.  He  said  he  wouldn’t 
be  surprised  if  something 
similar  happens  with  IBM’s 
Opteron-based  blades. 

©  55088 
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CVS  Prescribes  RFID  for  Retail  Payment  Terminals 


BY  LINDA  ROSENCRANCE 

CVS  Corp.  is  installing  RFID- 
enabled  terminals  for  processing 
various  types  of  payment-card 
transactions  at  its  5,400  phar¬ 
macy  retail  stores  nationwide, 
according  to  Hypercom  Corp., 
the  maker  of  the  terminals. 

Phoenix-based  Hypercom  last 
week  announced  that  CVS  has 
bought  12,000  of  its  Optimum 
L4100  terminals.  The  devices 
include  embedded  radio  frequen¬ 
cy  identification  readers  that  can 
capture  customer  account  infor¬ 
mation  stored  in  RFID  tags  built 
into  contactless  payment  cards 
or  key  fobs. 

O.B.  Rawls,  Hypercom’s  presi¬ 
dent,  said  CVS  has  piloted  the 
terminals  at  stores  in  the  Phoenix 
area  and  is  starting  to  roll  them 
out  nationally.  The  terminals  have 
been  configured  to  the  retailer’s 
specifications  and  can  accept 


magnetic  swipe  cards  and  smart 
cards  in  addition  to  the  contact¬ 
less  cards  and  fobs,  Rawls  said. 
He  noted  that  the  RFID  capabili¬ 
ties  are  designed  to  decrease  the 
amount  of  time  customers  spend 
waiting  in  line  to  make  purchases. 

Although  Rawls  wouldn’t  dis¬ 
close  the  value  of  the  contract 
with  CVS  or  even  how  much  the 
terminals  cost  individually,  he 
said  the  RFID  technology  typical¬ 
ly  adds  about  $100  to  the  price  of 
each  machine. 

CVS  didn’t  respond  to  numer¬ 
ous  requests  for  comment  about 
the  planned  rollout.  As  part  of 
Hypercom’s  announcement,  Karl 
Taylor,  the  Woonsocket,  R.I.- 
based  retailer’s  CIO,  singled 
out  the  RFID  capabilities  while 
noting  that  CVS  chose  the  L4100 
because  of  its  “advanced  func¬ 
tionality.” 

Sara  Shah,  an  analyst  at  ABI 


Research  in  Oyster  Bay,  N.Y., 
said  she  expects  more  retailers 
that  operate  small,  specialized 
stores  to  follow  CVS’s  lead 
on  RFID. 

“It  doesn’t  seem  to  be  on  the 
radar  screen  of  larger  retailers 
like  Wal-Mart,”  Shah  said.  “But 
it  makes  sense  for  smaller 
retailers  like  conve¬ 
nience  stores  and 
fast-food  restaurants,  or 
any  place  where  the 
customer  doesn’t  want 
to  spend  a  lot  of  time 
in  the  store.” 

Mike  Witty,  an  ana¬ 
lyst  at  Framingham, 
Mass.-based  IDC,  said 
the  rollout  at  CVS  is  an 
interesting  project.  But  it 
isn't  really  a  big  deal  in  the 
overall  development  and  adop¬ 
tion  of  RFID,  he  added. 

“It’s  not  RFID  in  the  supply 


chain  like  Wal-Mart  is  doing,” 
Witty  said.  A  handful  of  retailers 
are  experimenting  with  terminals 
designed  to  facilitate  payments, 
he  said,  “but  it’s  not  the  break¬ 
through  in  RFID  that  folks  are 
looking  for.”  ©  55063 
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NETWORK  EXCELLENCE 


Secure  Networking.  Assured  Performance.  Portfolio-wide. 

It’s  a  wiz  to  leave  legacy  limitation  behind.  Simply  Juniper  your  net.  We’re  the 
preferred  brand  of  networking  and  security  for  major  industries  -  from  Fortune 
500  enterprises,  the  largest  firms  on  Wall  Street  and  the  most  vigilant  government 
agencies  to  -  count  'em  -  25  of  the  top  25  service  providers. 


►  JUNIPER  NETWORKING  PLATFORMS. 

Juniper  Networks'  unrivaled  IP  platforms  feature  the  modular  JUNOS  operating  system, 
ensuring  an  efficient,  predictable  infrastructure  as  well  as  secure,  dependable  services 
at  scale.  It’s  advanced  architecture  that's  uncompromised  by  legacy  overhead,  while 
easily  and  effectively  integrating  into  your  existing  infrastructure.  And  guaranteeing 
industry-leading  performance  (and  lower  TCO)  up  and  down  our  line  of  platforms  ... 

•  J-series:  An  indispensable  platform  for  smaller  sites,  and  perfect  for  converged  IP  and 
IP/MPLS  infrastructures.  JUNOS  allows  multiple  functions  to  run  independently, 
delivering  high  levels  of  security,  uptime  and  performance  with  advanced  routing,  QoS 
and  management  policies  (and  with  reduced  operational  effort,  naturally). 

•  M-series:  Combines  best-in-class  IP/MPLS  capabilities  with  unmatched  service  richness, 
performance  and  dependability.  Ideal  for  the  multi-service  edge  of  provider  networks, 
plus  peering,  route  reflector  and  data  center  apps.  So  consolidate  multiple  networks 
while  generating  new  revenues  and  leading-edge  services. 

•  E-series:  A  full-featured  edge  routing  platform,  supporting  carrier-class  routing,  broadband 
subscriber  management  services  and  comprehensive  IP  services  -  a  dream  for  high- 
capacity  POPs  and  data  centers. 

•  Plus  our  Service  Deployment  System  (SDX-300):  Designed  to  let  customers  rapidly 
create  and  deploy  new  services  that  support  critical  applications.  This  highly 
scalable,  flexible  and  intelligent  platform  integrates  service  creation,  service 
activation,  subscriber  management  and  accounting  capabilities. 

►  JUNIPER  SECURITY  PRODUCTS. 

Predictably  superior  performance  shouldn’t  be  at  the  expense  of  security,  but  the  essence 
of  it.  So  Juniper  offers  remarkable  safeguards:  Top-of-the-line  technology  for  up-to-the- 
second  monitoring,  and  complete  network-  and  application-level  awareness. 

•  Integrated  Firewall / IPSec  VPN:  The  essential  security  blanket  for  each  specific  network 
segment  -  with  no  weak  links.  Get  ultimate  firewall  security  for  access  control,  user 
authentication,  and  network  and  application-level  attack  protection.  Plus  lower  capital 
investment  and  reduced  cost  of  support,  deployment  and  operations. 

•  SSL  VPN:  Cost-effectively  extend  secure  access  to  mobile  employees,  partners  and 
customers.  Get  granular  user-based  and  groupbased  access  control  of  both  application 
and  full  network  resources  -  eliminating  the  need  for  client-software  deployment, 
changes  to  internal  servers  and  costly  ongoing  maintenance  and  desktop  support. 

•  Intrusion  Prevention:  Juniper  IDP  products  integrate  application  and  network  visibility 
with  incident  investigation  and  remediation  -  helping  you  quickly  deploy  inline  attack 
prevention.  Also  find  rogue  servers  and  apps  added  without  permission. 

►  JUNIPER  SUPERIOR  SOLUTIONS. 

Tired  of  old  answers?  There’s  a  company  offering  an  award-winning  portfolio  of  products, 
and  assured,  secure  networking:  www.juniper.net/products 
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Navy  Takes  Command  of  IT  Assets 

Server-based  discovery  system  has 
identified  more  than  250,000  devices 


BY  THOMAS  HOFFMAN 

The  U.S.  Navy  has  launched 
its  first  enterprisewide  IT 
asset  management  initiative, 
which  is  expected  to  help 
it  make  more-effective  deci¬ 
sions  on  the  thousands  of  dis¬ 
parate  systems  it  has  deployed 
worldwide. 

Since  January,  the  Navy  has 
been  using  hosted  software 
from  Mountain  View,  Calif.- 
based  BDNA  Corp.  to  scan 
the  IP  addresses  of  hardware 
and  software  residing  in  U.S. 
facilities  on  its  sprawling 
MCI  Inc.  network. 

The  effort  has  enabled  the 
Navy  to  identify  and  locate 
more  than  250,000  systems 
installed  in  some  200  loca¬ 
tions,  said  Capt.  Chris 
Christopher,  a  leader  in  the 


BY  LUCAS  MEARIAN 

Sun  Microsystems  Inc.  and 
EMC  Corp.  today  will  release 
new  and  updated  storage  sys¬ 
tems  that  can  be  used  to  take 
on  growing  corporate  regula¬ 
tory  compliance  tasks. 

Sun’s  new  StorEdge  5310 
Compliance  Archiving  Sys¬ 
tem,  its  first  disk-based 
archiving  system,  is  based  on 
a  network-attached  storage 
(NAS)  appliance  Sun  pur¬ 
chased  from  Procom  Technol¬ 
ogy  Inc.  in  Irvine,  Calif.,  and 
includes  its  own  compliance 
software. 

Meanwhile,  EMC  unveiled 
upgrades  to  its  Centera  con¬ 
tent-addressed  storage  (CAS) 
system  that  triple  its  capacity, 
increase  its  ability  to  replicate 
to  multiple  remote  sites  and 
can  partition  storage  based  on 
business  application  needs. 

The  Sun  StorEdge  5310  can 
be  configured  with  either  Ser¬ 
ial  ATA  disk  drives  or  Fibre 
Channel  drives  and  can  scale 
to  179TB.  The  Sun  box  offers 


Navy’s  Program  Executive 
Office  for  Information  Tech¬ 
nology  in  Arlington,  Va. 

IT  assets  such  as  PCs, 
servers  and  routers  were  pur¬ 
chased  and  tracked  by  local 
IT  managers  prior  to  using 
BDNA’s  service,  he  said. 

In  the  coming  months, 
the  Navy  expects  to  extend 
the  centralized  network¬ 
scanning  program  worldwide 
to  pinpoint  at  least  250,000 
more  systems  deployed  on 
bases  and  ships,  according  to 
Christopher. 

Just  last  week,  a  group  from 
BDNA  began  scanning  U.S.  IT 
assets  on  a  regular  monthly 
schedule  rather  than  on  an  ad 
hoc  basis,  Christopher  said. 
The  data  is  stored  in  an  Oracle 
repository,  he  said. 


storage  retention  policy  en¬ 
forcement,  access  controls  and 
authentication  of  data  integrity. 

Tom  Martin,  director  of 
NAS  marketing  at  Sun,  said 
the  array  targets  companies 
undertaking  Windows  server 
consolidations,  long-term 
archiving,  and  compliance 
projects. 

Price  Points 

Unlike  EMC’s  Centera,  Sun’s 
5310  doesn’t  offer  single- 
instancing  technology,  which 
ensures  that  only  one  copy  of 
a  specific  document  or  image 
is  stored.  The  box  instead  is 
aimed  at  undercutting  its  com¬ 
petition  on  price,  Martin  said. 

A  6TB  model  of  the  box 
sells  for  $82,000.  EMC’s 
4.4TB  Centera  model  starts 
at  $148,000,  while  the  2.2TB 
version  is  less  than  $100,000. 

EMC  said  the  Centera  ar¬ 
ray’s  updated  CentraStar  man¬ 
agement  software  now  offers 
virtual  pooling  of  storage.  The 
box  can  also  replicate  its  vir- 


Christopher  placed  the 
annual  cost  of  the  BDNA 
asset-discovery  services  at 
“more  than  six  figures.”  He 
declined  to  be  more  specific. 

Worldwide  Endeavor 

Through  the  network-scanning 
program,  the  Navy  hopes  to 
get  a  better  handle  on  its 
widely  distributed  IT  assets. 
For  example,  the  effort  has  al¬ 
ready  helped  the  Navy  identi¬ 
fy  some  obsolete  operating 
systems  that  the  group  now 
plans  to  eliminate. 

“We  have  every  operating 
system  that’s  been  developed 
over  the  past  15  years,  some  of 
which  I’ve  never  even  heard 
of,”  Christopher  said.  “What 
we  intend  to  do  once  we  have 
our  arms  around  everything 
out  there  is  to  look  at  what  we 
have  and  make  business  deci¬ 
sions”  about  their  use. 

The  program  has  yielded 


tual  pools  of  storage  to  multi¬ 
ple  sites,  whereas  before  it 
could  replicate  only  to  one 
backup  site. 

“This  puts  access  and  secu¬ 
rity  privileges  by  application 
between  these  pools  of  stor¬ 
age,”  said  Sean  Lanagan,  direc¬ 
tor  of  product  management 
and  emerging  products  at 
EMC. 

Another  CAS  Entry 

The  Sun  and  EMC  moves 
come  shortly  after  Storage 
Technology  Corp.  introduced 
the  IntelliStore  array,  its  first 
homegrown  CAS  system, 
which  also  uses  ATA  disk 
drives  and  targets  regulatory 
compliance  tasks. 

Jonathan  Eunice,  an  analyst 
at  Illuminata  Inc.  in  Nashua, 
N.H.,  contended  that  while 
most  buyers  of  the  technology 
cite  regulatory  compliance  to 
justify  their  purchases,  the 
uptick  in  sales  of  disk-based 
archival  systems  is  really 
driven  simply  by  the  need  to 
get  at  information. 

Eunice  estimated  that  to 
date,  only  10%  of  such  systems 
are  used  for  regulatory  com¬ 
pliance  tasks.  ©  55087 


other  insights.  In  evaluating 
the  distribution  of  the  Navy’s 
operating  systems,  for  exam¬ 
ple,  Christopher’s  team  dis¬ 
covered  “that  we  have  a  good 
chunk  of  Linux  out  there.” 
Because  the  Navy  hasn’t 
standardized  on  a  particular 
version  of  Linux,  “it  would 
probably  make  sense  for  us  to 
develop  a  standard  policy,” 
he  said.  “Scanning  on  a 
monthly  basis  will  allow  us 
to  see  those  trends.” 

The  Navy’s  centralized  ap¬ 
proach  to  scanning  and  identi- 


The  U.S.  Army  is  heeding 
lessons  learned  from  corporate 
America  by  building  data  cen¬ 
ters  to  consolidate  local  enter¬ 
prise  application  servers  now 
running  at  hundreds  of  Army 
bases  nationwide. 

Joe  Capps,  director  of  enter¬ 
prise  systems  technology  activ¬ 
ity  at  the  Army  Network  Enter¬ 
prise  Technology  Command  in 
Arlington,  Va.,  said  the  move  is 
expected  to  cut  costs  and  make 
Army  operations  more  efficient. 

The  plan,  announced  earlier 
this  month  at  an  Army  IT  con¬ 
ference,  will  start  later  this  year 
with  an  effort  over  12  to  18 
months  to  create  two  data  cen¬ 
ters,  each  hooked  up  to  four 
bases,  Capps  said.  Over  the 
next  four  years,  all  application 
servers  running  at  all  U.S. 
bases  will  be  networked  to¬ 
gether  in  up  to  six  data  centers. 

The  servers  to  be  consoli¬ 
dated  include  machines  run¬ 
ning  applications  such  as  logis¬ 
tics  and  business  processing 
software.  In  addition,  Capps 
said  the  project  will  include 
data  storage  consolidation. 
“Storage-area  networks  just 
make  sense  from  a  business 
standpoint,”  he  said. 

Until  now,  the  Army’s  IT  de¬ 
partments  have  consolidated 
only  some  Web  applications. 
Because  some  of  the  Web 
consolidation  work  has  been 
completed,  the  experience 
gained  “should  make  the  enter- 
prise-level  consolidation  less 


fying  its  IT  assets  reflects  a 
trend  that’s  starting  to  catch 
on  with  other  organizations, 
said  Barbara  Rembiesa,  presi¬ 
dent  of  the  International  Asso¬ 
ciation  of  Information  Tech¬ 
nology  Asset  Managers  Inc.,  a 
for-profit  user  association  in 
Cleveland. 

Still,  she  warned  that  cen¬ 
tralized  server-based  discov¬ 
ery  tools  have  limited  effec¬ 
tiveness  if  organizations  don’t 
put  the  proper  asset  manage¬ 
ment  processes  in  place 
beforehand.  O  55076 


challenging,”  Capps  said. 

The  initial  effort  includes  two 
data  centers  to  ensure  redun¬ 
dancy.  Local  servers  running 
applications  used  for  research 
and  development  and  for  loca¬ 
tion-specific  needs  won’t  be 
included  in  the  consolidation. 
That  will  allow  bases  to  retain 
high-processing  capabilities 
for  their  individual  research, 
Capps  said. 

Capps  wouldn’t  disclose  a 
price  tag  for  the  project  and 
didn’t  have  any  estimates  of 
how  much  money  the  Army 
hopes  to  save.  He  said  only 
that  he  expects  the  savings  to 
be  “significant." 

Michael  Dortch,  an  analyst 
at  Robert  Frances  Group  Inc. 
in  Westport,  Conn.,  said  the 
Army’s  consolidation  effort  is 
on  the  same  track  as  many  pri¬ 
vate-sector  projects. 

"Government  doesn’t  have  a 
monopoly  on  moving  slowly 
when  it  comes  to  building  con¬ 
sensus,"  Dortch  said,  noting 
that  such  projects  are  a  “very 
daunting”  task. 

A  potential  benefit  of  the 
Army's  plan,  though,  is  that 
corporate  IT  managers  could 
use  it  to  add  credibility  to  their 
efforts  to  consolidate  servers 
inside  their  companies.  Dortch 
said.  “There  are  a  lot  of  IT  peo¬ 
ple  who  make  perfectly  valid 
arguments  for  server  consoli¬ 
dation  and  still  don't  get  the 
money  to  do  it,”  he  said. 

-  Todd  R.  Weiss 


New  Sun,  EMC  Storage 
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Sun  Issues  Alerts 
On  Java  Bugs 

Sun  Microsystems  Inc.  has  issued 
alerts  about  vulnerabilities  in  its 
Java  software  that  security  re¬ 
searchers  say  could  let  attackers 
execute  malicious  code  on  target¬ 
ed  computers.  Weaknesses  in 
Sun’s  Java  Web  Start  and  Java 
Runtime  Environment  could  let  an 
attacker  gain  back-door  access  to 
computers.  J2SE  updates  that  fix 
the  bugs  are  available. 


Yahoo  Buys  VoIP 
Service  Provider 

Yahoo  Inc.  has  acquired  voice- 
over-IP  service  provider  Dialpad 
Communications  Inc.  and  plans  to 
use  its  technology  to  develop  VoIP 
services.  Terms  of  the  deal  weren’t 
disclosed.  Dialpad  offers  VoIP  ser¬ 
vices  to  over  200  countries  along 
with  prepaid  and  calling-card  ser¬ 
vices.  The  latter  lets  users  make 
calls  from  a  regular  phone  without 
the  need  for  a  PC.  Dialpad  claims 
over  14  million  users. 


HP  Splits  PC/Printer 
Unit  Into  Groups 

Hewlett-Packard  Co.  announced 
that  it  has  split  its  recently 
merged  printer  and  PC  groups 
into  two  separate  divisions,  undo¬ 
ing  one  of  the  last  major  decisions 
by  former  CEO  Carly  Fiorina.  New 
CEO  Mark  Hurd  named  former 
PalmOne  Inc.  CEO  Todd  Bradley 
to  head  the  new  personal  systems 
group,  which  makes  handheld, 
notebook  and  desktop  PCs. 


Visa  Tool  Aims  to 
Cut  Credit  Fraud 

Visa  U.S.A.  Inc.  has  launched  a 
security  tool  that  allows  mer¬ 
chants  to  instantly  check  trans¬ 
actions  in  stores  or  online,  so  they 
can  identify  fraud  before  a  trans¬ 
action  is  completed.  Visa  said  its 
new  “advanced  authorization” 
system  is  expected  to  help  pre¬ 
vent  an  estimated  S164  million  in 
fraud-related  losses  over  the  next 
five  years. 
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Location,  Location, 
Location . . . 


...  is  more  than  just  a  weak  punch  line  to  a  stale  real  estate 
joke.  It’s  the  critical  element  missing  from  most  wire¬ 
less  security  tools,  says  Brian  Wangerien,  director  of 
product  management  at  Boston-based  Newbury 
Networks  Inc.  His  company’s  WiFi  Watchdog  tech¬ 


nology  fixes  on  the  location 
of  wireless  users  to  help  de¬ 
termine  their  access  rights. 
“Authentication  and  encryp¬ 
tion  alone  are  like  a  steel 
door  on  a  grass  hut,”  Wange¬ 
rien  quips.  By  adding  location 
information,  he  says,  IT  will 
know  whether  someone  try¬ 
ing  to  reach  an  application 
server  is  a  worker  popping 
onto  the  corporate  LAN  from 
the  cafeteria  or  a  “war  chalk- 
er”  sneaking  on  from  outside 
the  building.  WiFi  Watchdog 
can  also  be  used  to  track 
down  the  location  of  uninvit¬ 
ed  network  visitors,  which 
Wangerien  says  the  U.S.  Air 
Force  has  done  on  more  than 
one  occasion  at  an  undis¬ 
closed  air  base.  Version  5.0  of 
the  tool  is 
expected  to 
be  ready  in 
September, 
he  says. 
New  fea¬ 
tures  in¬ 
clude  a 
graphical 
view  of 
threat  con¬ 


ditions  and  prebuilt  reports 
for  regulatory-compliance 
audits.  In  addition,  WiFi 
Watchdog  5.0  can  automati¬ 
cally  stop  more  than  100 
threat  signatures.  Pricing 
starts  at  $14,995. 

Business  continuity  for 
e-mail  option . . . 

. . .  available  with  messaging 
security  service.  Electric  Mail 
Co.  in  Burnaby,  British  Co¬ 
lumbia,  offers  a  fallback  plan 
for  users  of  its  Perimeter- 
Protect  service  in  case  your 
Exchange  server  keels  over  or 
(heaven  forbid)  your  whole 
building  keels  over  in  one  of 
this  summer’s  hurricanes. 
Users  with  Electric  Mail 
accounts  can  rely  on  the  anti¬ 
virus  and  antispam  service  as 
a  backup  e-mail  tool.  Accord¬ 
ing  to  Ian  McDonald,  the 
company’s  general  manager, 
users  can  access  Electric 
Mail’s  service  via  a  browser 
during  an  Exchange  outage, 
but  their  messages  are  sent 
using  their  company’s  own 
domain  address.  He  says 
that’s  better  than  contacting 


business  partners  and  cus¬ 
tomers  with  unrelated  Hot¬ 
mail  or  Yahoo  accounts,  as 
many  users  now  do  in  emer¬ 
gencies.  McDonald  says  that 
by  year’s  end,  Electric  Mail 
plans  to  add  full  capabilities 
for  searching  the  messages  it 
stores.  Monthly  pricing  for 
the  service  can  be  as  low  as 
$3  per  user. 

Snooping  on  your 
rivals?  Looking  to . . . 

. . .  acquire  an  unsuspecting 
company?  Well,  your  end 

users  might  consider  disguis¬ 
ing  who  they  are  as  they 
mouse  around  the  Web,  says 
Lee  Itzhaki,  director  of  prod¬ 
uct  management  at  Anony¬ 
mizer  Inc.  The  San  Diego- 
based  company  offers  a  ser¬ 
vice  that  protects  the  identity 
of  Web  surfers. 

While  some  may  use 
the  sly  service  to 
visit  porn  sites 
anonymously,  busi¬ 
nesses  employ  it  to 
protect  their  corpo¬ 
rate  identities  while 
doing  everyday  competitive 
analysis.  Itzhaki  says  your 
browser  is  chock-full  of  infor¬ 
mation  about  you  and  your 
system,  so  companies  can  de¬ 
tect  where  you’re  from  and 
then  deliver  phony  Web  pages 
to  your  machine  —  as  he 
claims  happened  when  one 
airline  was  researching  a  ri¬ 
val’s  fare  structure.  U.S.  intel¬ 
ligence  agencies  use  Anony¬ 
mizer  to  scour  terrorist  Web 
sites  for  threat  information 
while  making  it  appear  as  if 
they’re  surfing  from  countries 
with  known  anti-U.S.  con¬ 
stituencies,  he  says.  Anony¬ 
mizer  supports  only  Windows 
systems  now  but  expects  to 
add  Macintosh  support  late 
this  year  or  early  in  2006. 

Trend  Micro  attacks 
spyware  on . . . 

. . .  consumer  PCs.  So  who 

cares?  You  do,  because  the 
capabilities  that  Trend  Micro 
Inc.  deploys  for  home  users 


with  this 
week’s  release 
of  its  Anti- 
Spyware  3.0 
software  will 
be  integrated 
into  its  cen¬ 
tral  gateway 
product  later 
this  year,  says 
Lane  Bess, 
president  of 
Trend  Micro 
North  America  in  Cupertino, 
Calif.  The  $29.95  consumer 
version  probes  150  compo¬ 
nents  of  a  user’s  PC  to  deter¬ 
mine  whether  malware  has, 
for  example,  changed  browser 
settings  or  modified  host  files. 
Bess  also  points  to  the  upgrad¬ 
ed  antispyware  tool’s  need  for 
60%  less  RAM  than  earlier 
versions  did,  claiming  that  the 
reduction  results  in 
75%  faster  loading 
times.  He  notes  that 
spyware  eradication 
efforts  don’t  get  the 
same  cooperation 
among  vendors  that 
antivirus  work  does. 
“The  industry  is  evolving,  and 
it’s  a  little  too  soon  for  the 
open  trading  of  files”  among 
competitors,  Bess  says. 

Keep  an  eye  on 
your  network . . . 

. . .  with  Eye  of  the  Storm,  net¬ 
work  management  software 
from  Entuity  Inc.  in  New 
York.  Version  4.0  of  the  net¬ 
work  performance  manage¬ 
ment,  fault-detection  and 
inventory- analysis  tool  ships 
next  week  and  adds  voice- 
over-IP  management  fea¬ 
tures,  such  as  performance 
and  availability  testing  and 
voice-quality  reporting.  Entu- 
ity’s  software  integrates  with 
CallManager,  Cisco  Systems 
Inc.’s  VoIP  call-processing 
software.  Eye  4.0,  as  the  prod¬ 
uct  is  known  for  short,  also 
adds  an  “open  modeling 
framework,”  says  Michael 
Jannery,  vice  president  of 
marketing  at  Entuity.  Pricing 
starts  at  $50,000.  ©  55048 


Unsecured  Wi-Fi 


networks  in 
Boston,  New  York 
and  Washington 
in  a  Newbury 
Networks 
“drive-by”  survey. 


Via 


Number  of  Web 
surfers  using 
Anonymizer. 


In  today’s  market,  documents  are  read  or  rejected 
within  seconds.  What  makes  the  difference?  Color. 
One  of  the  most  effective  business  tools,  color 
increases  response  and  interest  for  tangible, 
immediate  results.  And  color  is  more  affordable 
and  manageable  than  ever.  Working  with  industry 
leaders  like  HP,  Insight  can  assess,  design  and 
deploy  an  optimized  printing  environment  that 
puts  color  where  it  counts. 


CASE  STUDY:  ■ 

Doing  More  with  Less 


With  Insight’s  help,  one  national  food  processing  company  discovered  they 
could  meet  all  their  printing  requirements  with  half  the  number  of  printers 
Through  its  print  assessment  services,  Insight  created  an  affordable, 
practical  strategy  for  reducing  costs,  boosting  performance 
and  adding  color — all  while  keeping 
their  budget  in  the  black 
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Australian  Automaker 
Outsources  Data  Center 

SYDNEY,  AUSTRALIA 

armaker  Mitsubishi  Motors 
Australia  Ltd.  has  outsourced  its 
enterprise  server  operations  in  a 
five-year,  multimillion-dollar  deal  with 
IT  services  provider  Vectra  Corp. 

Adelaide,  Australia-based  Vectra 
announced  last  week  that  in  an  expan¬ 
sion  of  a  previous  contract,  it  will  man¬ 
age  Mitsubishi’s  mainframe  hardware 
and  more  than  100  midrange  systems 
that  control  vehicle-assembly  process¬ 
es,  including  computer-aided  design 
and  parts  inventory.  The  Mitsubishi 
unit  is  based  in  Clovelly  Park  in  South 
Australia. 

Tony  Newman,  the  automaker’s  gen¬ 
eral  manager  for  information  systems, 
said  Vectra’s  role  will  be  “fundamen¬ 
tal”  to  the  successful  production  of 
Mitsubishi’s  new  locally  made  car, 
which  is  code-named 
PS41  and  is  expected  to 
roll  out  in  October. 

“IT  plays  a  pivotal  role 
in  ensuring  we  can  track 
and  trace  the  component 
parts  from  external  sup¬ 
pliers  for  our  new  mod¬ 
el,”  Newman  said.  “Much 
of  the  planning  for  our 


new  car  is  about  eliminating  waste,  re¬ 
ducing  inventory  and  improving  effi¬ 
ciency.  Vectra  has  demonstrated  strong 
project  management  capabilities  that 
offer  us  the  potential  to  improve  the 
way  we  do  business.” 

■  SI0BHAN  McBRIDE,  COMPUTERWORLD 
AUSTRALIA 


EU  Research  Network 
Gets  a  Bandwidth  Boost 

BRUSSELS 

he  European  union  switched  on 
an  upgraded  version  of  its  Geant 
multigigabit  research  network  at  a 
ceremony  in  Luxembourg  last  week. 
The  new  Geant2  network,  which  uses 
leased  circuits  and  “dark”  fiber-optic 
cables,  is  expected  to  give  research  sci¬ 
entists  worldwide  almost  unlimited 
bandwidth  for  exchanging  data. 

The  network  should  offer  perfor¬ 
mance  of  up  to  320Gbit/sec.,  said  Dai 
Davies,  general  manager 
of  the  nonprofit  organi¬ 
zation  that  manages  the 
network.  Using  dark,  or 
otherwise  unused,  fiber 
capacity  means  that  the 
cost  of  adding  bandwidth 
becomes  “trivial,”  he  said. 

The  upgrade  is  expect¬ 
ed  to  benefit  researchers 


with  large  data-transfer  needs,  such  as 
those  working  in  astronomy  and  sub¬ 
atomic  physics.  Additional  bandwidth 
is  needed  because,  for  example,  two 
scientists  sharing  research  findings 
from  a  radio  telescope  could  “generate 
as  much  [network]  traffic  as  two  coun¬ 
tries,”  Davies  said. 

■  SIMON  TAYLOR,  IDG  NEWS  SERVICE 


Chip  Maker  Turns 
Network  Over  to  Equant 

Multinational  network  oper¬ 
ator  Equant,  a  unit  of  France 
Telecom  SA,  last  week  an¬ 
nounced  that  it  has  won  a  multiyear 
contract  valued  at  more  than  $100  mil¬ 
lion  to  provide  voice,  data  and  mobile 
communications  services  to  STMicro- 
electronics  NV,  a  Geneva-based  semi¬ 
conductor  maker. 

Equant  will  manage  network  opera¬ 
tions  —  including  voice  over  IP  and 
an  IP  virtual  private  network  used  to 
transmit  data  —  for  more  than  100 
sites  in  34  countries.  “This  deal  consol¬ 
idates  all  of  STMicroelectronics’  past 
service  providers  into  one  single  ven¬ 
dor,”  according  to  a  spokesman  for 
Paris-based  Equant. 

“The  goal  is  to  totally  turn  over  the 
network  infrastructure  to  Equant  and 
cut  costs  by  15%  to  20%, ”  said  Otto 
Kosgalwies,  vice  president  of  infra¬ 
structure  and  services  at  STMicroelec¬ 
tronics,  in  a  statement.  ©  55042 


Compiled  by  Mitch  Betts. 


Briefly  Noted 

Temenos  Group  AG  in  Geneva  last 
week  announced  that  Compagnie 
Monegasque  de  Banque,  a  private 
bank  in  Monaco,  has  selected  its 
Temenos  T24  software  to  replace 
the  core  banking  system  now  in  use 
at  CMB.  The  software  will  run  on 
IBM  servers  with  database  software 
from  jBase  International  Inc.  in 
Hemel  Hempstead,  England. 


IBM  Global  Services  last  week 
opened  its  fifth  software  outsourc¬ 
ing  center  in  India.  The  new  center 
in  Hyderabad  will  develop,  cus¬ 
tomize  and  maintain  applications 
for  clients  -  especially  SAP  appli¬ 
cations  -  and  may  employ  up  to 
1,000  programmers  by  year’s  end, 
according  to  a  spokeswoman  at 
IBM  India. 

■  JOHN  RIBEIR0,  IDG  NEWS  SERVICE 


Rocket  Software  Inc.,  a  software 
development  firm  in  Newton,  Mass., 
last  week  announced  that  it  has 
acquired  Astrac  Ltd.  in  a  $35  mil¬ 
lion  deal.  Warwick,  England-based 
Astrac  develops  business  intelli¬ 
gence  software  for  IBM  servers. 


GLOBAL  FACT 

$200M 

The  size  of  Intel  Corp.’s 
new  fund  for  investing 
in  Chinese  technology 
companies. 


SOURCE:  IDG  NEWS  SERVICE 


Continued  from  page  1 

Usability  

dard,  which  is  known  as  the 
Common  Industry  Format  for 
Usability  Test  Reports,  or  CIF. 

Butler,  who  is  a  technical 
fellow  at  Chicago-based  Boe¬ 
ing’s  Phantom  Works  research 
and  development  arm,  said  he 
thinks  that  the  international¬ 
ization  of  CIF  “is  really  going 
to  provide  it  with  the  critical 
mass  it  needs.” 

That’s  partly  due  to  the  ex¬ 
pected  involvement  of  Euro¬ 
pean  users,  who  put  a  high 
value  on  standards,  especially 
because  of  the  cross-border 
business  relationships  within 
the  European  Union.  CIF  ad¬ 
vocates  said  there  has  been  a 
lot  of  interest  from  overseas 
companies,  even  though  the 
American  National  Standards 


Institute’s  certification  of  the 
reporting  guidelines  in  2002 
[QuickLink  34596]  didn’t  ac¬ 
celerate  awareness  of  the  stan¬ 
dard  in  the  U.S. 

Cisco  Systems  Inc.,  IBM, 
Microsoft  Corp.  and  other  ma¬ 
jor  IT  vendors  participated  in 
the  development  of  CIF.  Even 
so,  few  vendors  offer  prospec¬ 
tive  customers  usability  re¬ 
ports  that  conform  to  the  stan¬ 
dard,  in  part  because  most 
users  aren’t  asking  for  them. 

CIF  doesn’t  tell  vendors 
what  tests  to  conduct.  Instead, 
it  provides  a  common  format 
for  reporting  test  results  based 
on  a  variety  of  usability  met¬ 
rics.  To  conform,  the  data  has 
to  be  detailed  enough  to  allow 
potential  software  buyers  to 
replicate  the  tests. 

The  reports  are  intended  to 
give  users  “some  feeling  about 
how  much  effort  we  might 


have  to  put  into  training,  and 
what  are  the  real  costs  of  own¬ 
ership,”  said  Jack  Means,  a  us¬ 
ability  researcher  at  State  Farm 
Mutual  Automobile  Insurance 
Co.  in  Bloomington,  Ill. 

Boeing  was  one  of  the  main 
drivers  of  the  effort  to  create 
CIF,  after  officials  at  the  air¬ 
craft  maker  became  convinced 


Common  Industry  Format 
For  Usability  Test  Reports 

WHAT  IS  IT?  A  mechanism 
for  reporting  software 
usability  test  results. 

WHAT  DOES  IT  MEASURE? 
Time  to  complete  tasks,  error 
rates  and  the  number  of  assis¬ 
tance  calls,  among  other  metrics. 

HOW  DO  I  GET  THE  REPORTS? 

Ask  your  vendors  for  them. 

WHYBOTHE  ?  Usability 
problems  add  to  TC0,  according 
to  advocates  of  the  standard. 


that  usability  problems  were 
resulting  in  significant  ex¬ 
penses.  Butler  said  usability 
issues  can  add  as  much  as  50% 
to  the  total  cost  of  software 
ownership. 

Although  many  employees 
may  accept  software  usability 
shortcomings  as  a  fact  of  life, 
corporatewide  problems  that 
affect  thousands  of  workers 
can  have  a  broad  negative 
impact. 

“The  usability  of  the  soft¬ 
ware  that  you  buy  on  an  enter¬ 
prisewide  basis  potentially  has 
a  really  significant  impact  on 
the  productivity  of  your  em¬ 
ployees,”  said  Tullis,  vice  pres¬ 
ident  of  Boston-based  Fideli¬ 
ty’s  applied  technology  unit. 

CIOs  and  other  IT  execu¬ 
tives  need  to  ask  vendors  for 
CIF-compliant  reports  as  part 
of  their  requests  for  proposals 
on  software  contracts,  accord¬ 


ing  to  participants  in  the  stan¬ 
dards  initiative. 

“Once  people  start  asking 
for  it,  vendors  are  going  to 
realize  that  they’re  going  to 
have  to  consider  usability,” 
said  Mary  Theofanos,  a  com¬ 
puter  scientist  at  the  National 
Institute  of  Standards  and 
Technology,  which  coordinat¬ 
ed  the  CIF  development  effort. 

For  many  vendors,  though, 
incorporating  usability  factors 
into  software  development 
will  be  difficult  because  it 
means  changing  the  way  they 
build  applications,  said  Whit¬ 
ney  Quesenbery,  president  of 
the  Usability  Professionals’ 
Association  in  Bloomingdale, 
Ill.  Taking  usability  into  ac¬ 
count,  she  noted,  means  hav¬ 
ing  a  process  that  not  only 
considers  business  and  techni¬ 
cal  needs,  “but  also  user 
needs.”  ©  55089 
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Oracle  Pledges  2006  World  Update 


Users  optimistic 
about  future  of 
green-screen  line 

BY  MARC  L.  SONGINI 

GRAPEVINE,  TEXAS 

USTOMERS  OF  the 

once-moribund 
World  applications 
are  hoping  that  Ora¬ 
cle  Corp.’s  pledge  last  week  to 
update  the  aging  product  line 
portends  a  long  and  fruitful 
life  for  the  suite. 

In  addition  to  bringing  out 
Service  Pack  16,  which  adds 
new  features  to  the  software, 
Oracle  quietly  told  some  users 
that  it  plans  to  do  a  major  re¬ 
vamp  of  the  green-screen 
products  next  year. 

Those  moves,  plus  Oracle’s 
earlier  commitment  to  the 
suite  through  2013,  gave  a  half- 
dozen  World  users  at  the 
Quest  International  Users 
Group  conference  here  last 
week  some  hope  for  the  future 
of  the  line,  which  was  slated 
for  replacement  by  J.D.  Ed¬ 


wards  prior  to  that  company’s 
acquisition  by  PeopleSoft  in 
2003.  Oracle  bought  the  com¬ 
bined  firms  earlier  this  year 
and  pledged  to  update  the 
World  suite. 

The  Quest  user  conference 
was  held  in  conjunction  with 
the  Oracle  Applications  Users 
Group  conference. 

“I  was  apprehensive  at 
first,”  said  Vincent  Rancuret, 
information  systems  analyst 
at  KIK  Custom  Products  in 
Danville,  Ill.  “But  they  appear 
to  be  doing  pretty  well,  and  I 
now  feel  comfortable.”  The 
custom  manufacturer  runs  the 
World  human  resources  appli¬ 
cation  and  other  software. 

Only  six  months  into  Ora¬ 
cle’s  merger  with  PeopleSoft, 
it’s  still  hard  to  say  exactly 
how  strong  Oracle’s  commit¬ 
ment  is,  and  some  users  are 
having  a  hard  time  believing 
they  are  going  to  get  what 
they  have  been  asking  for,  said 
Dave  Hyzy,  director  of  IT  at 
Benderson  Development  Co., 
a  World  shop  in  Buffalo,  N.Y. 


NEW  PRODUCTS 


World  Service 
Pack  16 

■  Supports  statutory  compli¬ 
ance  with  Sarbanes-Oxley  Act. 

■  Offers  self-service  applica¬ 
tions  with  24-hour  access. 

■  Includes  regulatory  and  local 
business  updates  for  South 
America  and  Europe. 


World  Version  ‘A9’ 

■  Is  not  yet  formally  announced. 

■  Will  allow  A7  users  to  exploit 
manufacturing  and  other  A8 
features. 

■  Will  consolidate  Versions  A7 
and  A8  into  a  single  application. 

■  Includes  new  workflows. 

■  Will  more  easily  integrate  with 
other  applications. 

“We  are  wary  because  of  a 
past  history  that  has  nothing 
to  do  with  Oracle,”  he  said. 

In  an  interview,  John  Schiff, 
vice  president  and  general 


manager  of  Oracle’s  World 
operations,  confirmed  that 
Oracle  plans  to  roll  out  a  new 
release  of  World  next  year. 

Though  details  of  that  proj¬ 
ect  remain  sketchy,  Schiff  said 
the  unnamed  new  version  will 
let  users  of  World  Versions  A 7 
and  A8  migrate  to  a  single, 
consolidated  platform  and  ex¬ 
ploit  the  benefits  of  both  ver¬ 
sions.  The  next  release  will 
also  have  new  workflows  and 
development  tools  for  easier 
integration  with  other  applica¬ 
tions,  he  said. 

A  new  version  of  World  was 
welcome  news  for  some  users. 
At  Stolt-Nielsen  Transporta¬ 
tion  Group,  IT  staffers  have 
wanted  to  migrate  from  World 
A 7  to  A8  but  have  held  back, 
fearing  that  they  would  be 
forced  to  move  to  the  follow- 
on  EnterpriseOne  line,  said 
Mickey  Stayman,  business 
systems  manager  at  the  bulk 
liquids  transporter.  A  new 
release  from  Oracle  is  a  step 
that  could  convince  Stayman 
to  update  his  World  software. 


Nevertheless,  there  is  still 
some  reluctance  to  accept  Or¬ 
acle’s  pledge.  “So  far,  there  are 
more  questions  than  answers,” 
said  Jan  Withers,  applications 
programming  manager  at  The 
Clark  Construction  Group  Inc. 
in  Bethesda,  Md. 

She  fears  that  key  World 
features  that  her  company  re¬ 
lies  on  may  be  dropped  as  part 
of  Oracle’s  Fusion  project  to 
build  a  best-of-breed  applica¬ 
tion  that  incorporates  func¬ 
tions  of  all  Oracle  products. 
Withers  also  worries  that  Ora¬ 
cle  won’t  take  full  advantage  of 
IBM’s  DB2  database,  which  her 
company  uses.  So  far,  she  says, 
“you  hear  about  them  doing  it, 
then  there’s  nothing.” 

Hyzy,  although  generally 
upbeat,  said  he  doubts  that 
Oracle  will  continue  to  certify 
IBM’s  DB2  database  as  the 
platform  of  choice  for  World. 

Oracle  has  yet  to  make  a  de¬ 
cision  about  the  database,  said 
a  company  executive.  ©  55092 


MORE  ONLINE 

Q&A:  Oracle’s  John  Wookey  discusses 
the  progress  of  Project  Fusion: 

QuickLink  55090 
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Visa  IT  Unit  CTO  Discusses 
Open  Systems  and  Security 


BY  LUCAS  MEARIAN 


David  Allen,  chief  technology  of¬ 
ficer  at  Visa  International  Inc.’s 
IT  unit,  has  recently  overseen 
the  opening  of  a  new  70,000- 
square-foot  data  center  and  the 
rollout  of  an  upgrade  to 
its  global  antifraud  sys¬ 
tem.  Davis  spoke  to 
Computerworld  last  $ 

week  about  his  security 
initiatives  and  IT  chal¬ 
lenges. 


What  technology  chal¬ 
lenges  keep  you  up  at 
night?  The  No.  1  tech¬ 
nology"  challenge  at  Visa  is 
continuing  our  unparalleled 
availability.  As  we  introduce 
more  and  more  change  at  an 
ever-increasing  rate,  keeping 
that  going  and  developing  sys¬ 
tems  architectures  that  are 


Q&A 


more  permissive  to  change 
keeps  me  going. 

Are  you  looking  to  open  systems 
to  help  you  with  that?  We  use 

open  systems  very  extensively. 
We  have  over  3,000 
open  systems  servers 
running  as  part  of  our 
production  services. 
Any  impression  that 
we’re  just  a  mainframe 
shop  would  be  incor¬ 
rect.  All  of  our  infor¬ 
mation-mining  capa¬ 
bilities  and  data  ware¬ 
housing  is  95%  open- 
systems.  And  most  of  our  new 
development  is  open-systems- 
based. 

How  are  you  bolstering  encryption 
as  customers  become  more  wary 
of  identity  and  data  theft?  First, 


you  have  to  look  at  the  whole 
value  chain  from  the  merchant 
through  the  issuer  and  back 
again.  Visa  is  investing  hun¬ 
dreds  of  millions  of  dollars  a 
year  along  the  entire  stream  of 
security  and  data  protection 
effort.  Encryption  is  part  of 
that,  but  it’s  not  an  answer  all 
by  itself. 

Today,  [data]  on  our  mes¬ 
saging  stream  is  unencrypted. 
And  file  exchange,  that’s  al¬ 
most  always  encrypted  be¬ 
cause  those  are  the  financial 
transactions.  We  hear  the  cry 
out  there,  and  we’re  not  stand¬ 
ing  still. 

Are  you  considering  encrypting 
data  at  rest?  Absolutely. 

On  disk  and  tape?  Yep.  We  fol¬ 
lowed  a  lot  of  practices  over 


time  that  separate  key  pieces 
of  data  that  even  without  en¬ 
cryption  tend  to  make  [the 
data]  useless  unless  collated. 
Taking  that  aside,  we’ve  begun 
a  program  to  encrypt  our  data 
at  rest  and  expect  to  be  rolling 
that  out  over  the  next  couple 
of  years. 

Is  the  new  data  center  in  Denver 
the  largest  you’ve  built  to  date? 

Yes. 

You  have  full  redundancy  in  that 
data  center.  Do  you  plan  to  add 
that  same  type  of  redundancy  to 
your  other  data  centers?  We  do 

have  a  plan  to  upgrade  our 
other  centers.  Exactly  what 
they’ll  look  like  is  still  [to  be 
determined].  We  aren’t  begin¬ 
ning  the  next  data  center  until 
we’re  finished  with  this  partic¬ 
ular  operation. 

What  is  the  biggest  challenge  to 
the  financial  services  industry  as 
a  whole  today?  The  consolida¬ 
tion  that’s  gone  on  and  pay¬ 


ments  in  general . . .  pose 
some  huge  challenges.  When 
you  look  at  our  industry,  the 
question  of  how  to  meet  the 
needs  of  these  megaplayers 
when  you’re  a  Visa  and  con¬ 
tinue  to  serve  the  needs  of 
vast  number  of  others  in  the 
industry  is  the  challenge. 

The  top  10  merchants  have 
8%  of  [personal  consumer 
expenditures].  Clearly,  the 
top  10  card-issuing  banks 
have  a  huge  percentage  of 
the  market.  The  main  chal¬ 
lenge  is  to  be  able  to  continue 
to  meet  their  needs  and  the 
needs  of  the  smaller  players 
in  the  market. 

What  technology  is  going  to  help 
you  do  that?  I  think  the  ability 
to  provide  low-cost,  rapid  cus¬ 
tomization.  Obviously,  we’re 
going  to  have  less  customiza¬ 
tion  for  the  smaller  players 
than  the  big  players.  It’s  just  a 
matter  of  scale,  but  they’ll  still 
require  things  that  need  cus¬ 
tomization.  ©  55034 
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NETWORK 

The  largest  and  fastest 
national  wireless  data  network. 
The  largest  U.S.  provider  on 
the  global  standard. 


Our  people  and  partners 
make  wireless  work  for 
more  businesses  than  any 
other  wireless  carrier. 


The  broadest  and  deepest 
portfolio  of  wireless 
business  solutions. 


24/7  enterprise-grade 
support.  And  a  service 
staff  dedicated  solely  to 
business  people. 


right  away 


drives  more 


business  to  Avis. 


Cingular  helped 
Avis  take  a  premier 
service  nationwide. 

By  implementing  a 
customized  appli¬ 
cation  to  run  on  the 
ALLOVER ™  network, 

Cingular  gave  Avis 
broader  nationwide 
coverage.  Now 
more  Avis  customers  can  bypass  the  rental  counter  and 
check  in  right  from  the  Avis  shuttle.  More  satisfied 
customers  puts  Avis  on  an  even  greater  road  to  success. 


CINGULAR  MAKES  BUSINESS  RUN  BETTER 


^cingular 

raising  the  barr.iill 

To  find  out  how  Cingular  can  make  your  business  run  better, 

•  call  your  account  representative 

•  click  cingular.com/businessleader 


Cingulafs  ALLOVER  data  network  covers  over  250  million  people  and  is  growing. 

Coverage  is  not  available  in  all  areas.  Global  coverage  based  on  coverage  in  174  countries.  Fastest  claim  compares  Cingular’s  measured  speed  of  its  EDGE  network 
to  other  carriers’  speed  claims  for  their  national  data  networks.  All  marks  property  of  their  respective  owners.  ©2005  Cingular  Wireless.  All  rights  reserved. 
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BEA,  Others  Add  Tools 
To  Build,  Manage  SOAs 

Vendors  move  to  fill  Web  services 
infrastructure  gap  with  legacy  apps 


BY  HEATHER  HAVENSTEIN 

NTERPRISES  MOVING 
to  service-oriented 
architectures  are 
increasingly  finding 
that  they  need  an  infrastruc¬ 
ture  for  SOA  management  and 
security  —  and  vendors  are 
moving  quickly  to  tap  this 
growing  market. 

For  example,  BEA  Systems 
Inc.,  whose  history  is  anchored 
in  the  application  infrastruc¬ 
ture  business,  earlier  this 
month  unveiled  technology 
designed  to  provide  the  infra¬ 
structure  for  enterprises  to 
build  and  manage  SOAs.  And 
this  week,  Systinet  Corp.  and 
Iona  Technologies  Inc.  are 
also  releasing  SOA  tools. 

BEA’s  AquaLogic  family  of 
new  and  rebranded  products 
will  provide  messaging,  Web 
services  management  and  se¬ 
curity  to  ease  the  flow  of  ser¬ 
vices,  executives  said.  The 
tools  are  targeted  at  architects 
and  application  specialists 
rather  than  at  developers. 

San  Jose-based  BEA  and 
the  other  vendors  are  maneu¬ 
vering  to  gain  ground  in  an 
expanding  Web  services  soft¬ 
ware  market,  which  research 
firm  IDC  predicts  will  grow 
from  $2.3  billion  in  2004  to 
almost  $15  billion  by  2009. 

Seeking  Integration 

The  new  BEA  product  line  is 
designed  for  users  such  as 
Verizon  Communications  Inc., 
which  logs  about  2.5  million 
Web  services  per  day  that  are 
anchored  by  a  mostly  home¬ 
grown  SOA  that  supports  the 
design,  deployment  and  man¬ 
agement  of  Web  services. 

Mehul  Shah,  project  man¬ 
ager  for  the  telecommunica¬ 
tions  services  provider’s  SOA, 
which  it  calls  IT  Workbench, 
said  he’s  interested  in  seeing 
how  the  BEA  products  can 
help  Verizon  bring  its  systems 


together  to  provide  a  compre¬ 
hensive  SOA  platform. 

“It  is  always  good  to  see 
that  companies  like  BEA  are 
rolling  out  things  that  we 
started  asking  for  two  to  three 
years  ago  before  we  even 
wrote  the  first  line  of  code 
[for  our  SOA],”  said  Shah. 

Verizon  must  find  ways  to 
include  technologies  from 
BEA,  IBM,  Sun  Microsystems 
Inc.  and  others  in  its  SOA  “and 
still  provide  service  manage¬ 
ment,  security  [and]  business- 
activity  monitoring  across  the 
board,”  Shah  said. 

Accredited  Home  Lenders 
Inc.  in  San  Francisco  has  been 
using  an  SOA  since  the  begin¬ 
ning  of  the  year  to  help  trans¬ 


form  its  business  model  from 
traditional  mortgage  lending 
to  a  self-service  model  where 
brokers  can  submit  applica¬ 
tions,  get  pricing  and  receive 
approval  online,  said  CIO  Jim 
Pathman.  The  company  is  a 
beta  user  of  the  AquaLogic 
Data  Services  Platform  and 
enterprise  service  bus  (ESB) 
products. 

With  the  platform,  Pathman 
can  extract  data  from  a  legacy 
application  at  runtime  and  use 
that  data  in  other  applications 
without  having  to  make  the 
legacy  application  a  Web  ser¬ 
vice.  The  service  bus  allows 
the  company  to  integrate  Web 
services  without  having  to 
write  code  in  the  header  of 
each  service  to  tie  them  to¬ 
gether,  Pathman  said. 

“If  we  made  a  change  on 
any  of  the  legacy  systems  . . . 


NEW  PRODUCTS 

BEA 

AquaLogic 

■  AquaLogic  Service  Bus 
(code-named  Quicksilver)  is 
an  ESB  that  provides  mes¬ 
sage  brokering,  dynamic 
routing  and  transformation, 
coupled  with  service  life  cy¬ 
cle  management  for  enforc¬ 
ing  service-level  agreements. 

■  AquaLogic  Data  Services 
Platform  (code-named  Liquid 
Data)  provides  a  unified  view 
of  data  from  any  source  so 
services  can  be  easily  built, 
changed  and  reused. 

■  AquaLogic  Enterprise 
Security  secures  distributed 
applications. 

■  AquaLogic  Service  Registry 
provides  SOA  governance 
and  life-cycle  management. 


we’d  have  to  go  back  to  the 
header  and  recode,”  he  added. 
Shawn  Willett,  an  analyst  at 


Current  Analysis  Inc.  in  Ster¬ 
ling,  Va.,  said  BEA  needs  a 
“second  act  to  restart  growth” 
now  that  its  core  application 
server  market  has  leveled. 

The  new  line  must  add  ca¬ 
pabilities  to  meet  that  need,  he 
said.  First  and  foremost,  Wil¬ 
lett  said,  the  AquaLogic  prod¬ 
ucts  must  become  stand-alone 
technologies  that  don’t  de¬ 
pend  on  other  BEA  offerings, 
especially  the  mainstay  Web- 
Logic  application  server. 

Burlington,  Mass.-based 
Systinet  is  set  to  unveil  the  lat¬ 
est  version  of  its  SOA  Busi¬ 
ness  Service  Registry  and  a 
new  policy  manager  product 
designed  to  simplify  the  cre¬ 
ation,  management  and  en¬ 
forcement  of  policies  that  can 
govern  an  SOA. 

Waltham,  Mass.-based  Iona 
Technologies  this  week  will 
reveal  plans  to  offer  support 
for  an  open-source  ESB  called 
Celtix  to  be  hosted  by  the 
ObjectWeb  Consortium,  an 
open-source  community  fo¬ 
cused  on  developing  distrib¬ 
uted  middleware.  O  55039 


Projects  Prompt  Quest  for 
New  Management  Features 

DENVER 


THE  NEED  FOR  SOFTWARE  that 
can  help  IT  staffers  manage  the 
implementation  of  SOAs  and 
monitor  their  use  was  a  big  topic 
of  discussion  at  this  month’s  HP 
Software  Forum  here.  Several  at¬ 
tendees  said  that  as  more  and 
more  companies  launch  SOAs, 
sophisticated  tools  for  supporting 
the  technology  are  becoming  in¬ 
creasingly  important. 

For  example,  DHL  International 
GmbH  plans  to  launch  an  SOA 
prototype  in  about  a  month,  said 
Dennis  Deane,  the  delivery  com¬ 
pany’s  Prague-based  program 
manager  for  European  IT  ser¬ 
vices.  DHL  is  eager  to  deploy  an 
SOA  because  of  expectations 
that  it  will  enable  easy  reuse  of 
applications,  vastly  reducing  de¬ 
velopment  time  for  both  internal 
and  external  projects. 

“It  will  eliminate  the  custom 
connections  we  have  to  make  to 


each  [business]  partner,”  Deane 
noted. 

But  managing  the  SOA  will  be 
complex  and  require  the  installa¬ 
tion  of  software  that  can  help 
automate  the  process,  Deane 
added.  He  said  DHL  is  exploring 
SOA  management  tools  from  IBM, 
BEA  Systems  and  other  vendors. 
It  also  wants  to  review  the  Open- 
View  SOA  Manager  software  that 
Hewlett-Packard  Co.  an¬ 
nounced  at  the  confer¬ 
ence,  which  was  jointly 
sponsored  by  HP  and  the 
OpenView  Forum  Inter¬ 
national  user  group. 

DHL  began  a  global 
rollout  of  HP's  OpenView 
Service  Desk  4.5  soft¬ 
ware  in  May  2004.  The 
company  has  already  be¬ 
gun  to  see  a  20%  to 
30%  reduction  in  the 
cost  of  many  IT  functions 
related  to  configuration 


management  and  help  desk  ser¬ 
vices,  said  Gary  Griffin,  senior 
vice  president  and  head  of  IT  ser¬ 
vices  at  DHL's  Scottsdale,  Ariz., 
data  center,  one  of  three  that  the 
company  runs  globally. 

Savings  and  Efficiency 

The  multimillion-dollar  Service 
Desk  implementation  is  expected 
to  ultimately  save  DHL  “tens  of 
millions”  annually  by  eliminating 
five  licenses  for  rival  help  desk 
tools  plus  the  servers  they  run  on, 
Deane  said.  It  should  also  im¬ 
prove  IT  efficiency  by  providing 
simplified  help  desk  pro¬ 
cedures  for  supporting 
DHL's  130,000  PCs  and 
2,600  servers,  he  added. 

The  success  DHL  is 
seeing  on  the  Service 
Desk  project  is  contribut¬ 
ing  to  Deane’s  interest  in 
reviewing  SOA  Manager. 
He  noted,  though,  that  it 
might  be  another  one  to 
two  years  before  DHL 
has  a  full  SOA  in  place. 
"An  SOA  would  be  a  very 
big  deal,”  Deane  said. 


HP  officials  and  industry  ana¬ 
lysts  said  SOA  Manager,  which 
starts  at  $25,000  plus  additional 
costs  for  software  agents  and 
brokers,  will  be  most  applicable  to 
large  customers.  The  tool  has 
been  tested  by  a  group  of  20 
companies  globally  over  the  past 
18  months,  according  to  Bill  Em¬ 
mett,  HP’s  chief  solutions  manag¬ 
er  for  OpenView. 

A  senior  vice  president  at  a 
global  financial  conglomerate  that 
was  one  of  the  SOA  Manager  beta 
testers  said  it  hopes  to  be  the  first 
company  to  deploy  the  software. 
The  user,  who  asked  that  neither 
he  nor  his  company  be  named, 
said  the  firm  expects  to  gain  a 
competitive  advantage  within  the 
financial  services  industry  by  us¬ 
ing  the  management  software. 

“We  don’t  think  of  this  technol¬ 
ogy  in  ones  or  zeros,  but  as  an 
enabler  of  business  services,”  he 
said,  adding  that  SOA  Manager 
and  the  architecture  it  supports 
should  help  the  firm  “keep  busi¬ 
ness  processes  simpler.” 

0  54965 
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DEANE  says 
an  SOA  will 
“eliminate 
the  custom 
connections 
we  have  to 
make  to  each 
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Judge  OKs  Part  of  Novell’s 
Suit  Against  Microsoft 


BY  GRANT  GROSS 

A  U.S.  District  Court  judge  let 
stand  two  of  the  six  counts  in 
Novell  Inc.’s  antitrust  lawsuit 
against  Microsoft  Corp.,  which 
accused  the  software  giant  of 
damaging  Novell’s  business 
through  monopolistic  behav¬ 
ior.  The  remaining  counts 
were  dismissed. 

In  a  ruling  on  June  10,  Judge 
Frederick  Motz  of  the  U.S. 
District  Court  for  the  District 
of  Maryland  denied  Micro¬ 
soft’s  motion  to  dismiss  two 
counts  in  Novell’s  lawsuit, 
which  claims  that  Microsoft 
illegally  damaged  efforts  by 
Novell  to  market  its  Word¬ 


Perfect  word-processing  and 
Quattro  Pro  spreadsheet  ap¬ 
plications.  The  products  are 
now  owned  by  Corel  Corp. 

The  two  remaining  counts 
are  based  on  allegations  that 
Microsoft  illegally  used  its  mo¬ 
nopoly  in  the  operating  system 
market  and  that  Microsoft  en¬ 
tered  into  exclusionary  agree¬ 
ments  with  computer  makers. 

Microsoft  argued  that  Nov¬ 
ell’s  claims  aren’t  legitimate 
because  its  office  productivity 
packages  didn’t  compete  in 
the  operating  system  market, 
where  the  government’s  case 
had  proved  a  Microsoft  mo¬ 
nopoly. 


But  Motz  suggested  that  Mi¬ 
crosoft  knew  of  the  effect  its 
operating  system  monopoly 
had  on  other  software,  citing  a 
1997  e-mail  from  Microsoft  Of¬ 
fice  division  chief  Jeff  Raikes 
to  investor  Warren  Buffet. 

In  the  e-mail,  Raikes  wrote: 
“If  we  own  the  key  ‘franchises’ 
built  on  top  of  the  operating 
system,  we  dramatically  widen 
the  ‘moat’  that  protects  the  op¬ 
erating  system  business.  We 
hope  to  make  a  lot  of  money 
off  these  franchises,  but  even 
more  important  is  that  they 
should  protect  our  Windows 
royalty  per  PC _ And  suc¬ 

cess  in  those  businesses  will 


help  increase  the  opportunity 
for  future  pricing  discretion.” 

The  four  counts  thrown 
out  by  Motz  had  alleged  that 
Microsoft  held  monopolies 
in  the  word-processing  and 
spreadsheet  application  mar¬ 
kets.  The  ruling  stated  that 
those  allegations  were  never 
asserted  in  the  U.S.  Depart¬ 
ment  of  Justice’s  antitrust  case 
against  Microsoft,  and  Novell’s 
civil  antitrust  case  is  based  on 
that  case. 

The  DOJ’s  case  ended  with 
a  judge-approved  settlement 
in  November  2002. 

Further  Litigation 

Novell  filed  the  WordPerfect- 
related  antitrust  lawsuit  in 
November  2004  [QuickLink 
50747],  within  days  of  settling 
with  Microsoft  over  antitrust 
claims  related  to  Novell’s  Net¬ 
Ware  network  operating  sys¬ 


tem  product.  Microsoft  agreed 
to  pay  Novell  $536  million  in 
that  settlement. 

Motz  rejected  Microsoft’s 
argument  that  Novell  doesn’t 
have  a  legitimate  claim  to 
damages  related  to  Word¬ 
Perfect  because  Novell  sold 
the  rights  to  the  package. 

Novell  merged  with  Word¬ 
Perfect  Corp.  in  June  1994.  In  a 
related  transaction  at  the  same 
time,  Novell  purchased  Quat¬ 
tro  Pro  from  Borland  Interna¬ 
tional.  The  combined  value  of 
WordPerfect  and  Quattro  Pro 
at  the  time  of  the  transactions 
was  more  than  $1  billion,  ac¬ 
cording  to  Novell.  Less  than 
two  years  later,  Novell  sold 
WordPerfect  and  Quattro  Pro 
to  Corel  for  approximately 
$170  million.  ©  55027 


Gross  is  a  reporter  for  the 
IDG  News  Service. 
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U.S.  Firm  Loses  Part  of 
Massive  U.K.  FT  Project 


IDX  replaced  by 
Cerner,  will  take 
$2M-$4M  charge 

BY  MARC  L.  SONGINI 

BURLINGTON,  Vt.- 
based  software  ven¬ 
dor  working  on  an 
$11.2  billion  IT  over¬ 
haul  of  the  U.K.  National 
Health  Service  (NHS)  has 
been  removed  from  a  major 
part  of  the  project. 

IDX  Systems  Inc.,  a  maker 
of  medical  applications, 
earlier  this  month  said  that  it 
agreed  to  end  a  contract  with 
Fujitsu  Services  Ltd.,  the 
prime  contractor  for  the  proj¬ 
ect  in  the  NHS’s  southern 
cluster  region,  which  includes 
a  handful  of  U.K.  counties  and 
islands. 

The  pact  had  called  for  Fu¬ 
jitsu  to  use  an  application 
jointly  built  by  IDX  and  BT 


Group  PLC  for  the  NHS’s  Lon¬ 
don  cluster.  BT  Group  is  the 
prime  contractor  for  the  Lon¬ 
don  cluster. 

IDX  said  it  expects  that  the 
costs  of  exiting  the  contract 
will  force  it  to  take  a  charge 
of  between  $2  million  and 
$4  million  in  the  second  quar¬ 
ter  of  2005. 

Fujitsu  acknowledged  that  it 
had  ended  the  contract  with 
IDX  but  declined  to  comment 
on  the  reasons  for  the  move. 
London-based  telecommuni¬ 
cations  firm  BT  Group  said 
it  is  not  involved  in  the  south¬ 
ern  cluster  project. 

Better  Patient  Care 

The  goal  of  the  10-year  proj¬ 
ect,  dubbed  the  National  Pro¬ 
gram  for  IT  (NPFIT),  is  to  up¬ 
date  the  health  agency’s  oper¬ 
ations  so  it  can  deliver  better 
patient  care  and  service. 

The  NHS  unit  overseeing 
the  IT  overhaul,  Connecting 


BBT  has  clearly 
had  significant 
problems  fitting 
IDX’s  software  to 
the  U.K.  system, 
and  we  find  it  hard 
to  believe  that  Fuji¬ 
tsu  and  Cerner  won’t 
face  many  of  the 
same  challenges. 

TOLA  SAR6EANT,  ANALYST, 

OVUM  LTD. 

for  Health,  allowed  Fujitsu  to 
replace  IDX’s  enterprise  clini¬ 
cal  software,  Carecast,  with  a 
health  care  application  called 
Millennium  from  Kansas  City, 
Mo.-based  Cerner  Corp. 

Meanwhile,  BT  Group  and 
IDX  will  continue  to  collabo¬ 
rate  on  developing  software 


for  the  NHS’s  London  cluster. 

The  move  by  Fujitsu  to 
change  vendors  follows  a 
warning  in  March  by  Richard 
Granger,  director  general  of 
the  NPFIT,  that  contractors 
that  fail  to  meet  deadlines  can 
be  dropped  from  the  project. 

“It  was  always  envisaged 
that  there  might  be  some 
change  of  suppliers,”  said  an 
NHS  spokesman  via  e-mail. 
“Senior  [officials]  in  Connect¬ 
ing  for  Health  have  publicly 
stated  this  on  several  occa¬ 
sions.” 

Assessing  the  Impact 

The  government  spokesman 
said  the  removal  of  IDX  from 
the  southern  cluster  effort 
isn’t  expected  to  affect  the 
overall  project.  According  to 
the  NHS  Web  site,  the  move 
“provides  the  opportunity  for 
BT  and  IDX  to  redouble  their 
focus  on  the  delivery  of  ser¬ 
vices  to  the  NHS  in  London.” 

The  NHS  spokesman  re¬ 
ferred  specific  questions  on 
the  subject  of  IDX’s  removal 
to  Tokyo-based  Fujitsu. 

IDX  declined  to  comment 
about  the  situation,  referring 
instead  to  comments  made  by 


IBM,  ACS  Ink  Disney 
To  IT  Services  Deals 


Contracts  total 
$1.3B;  firms  said  to 
absorb  1,000  jobs 


BY  LINDA  ROSENCRANCE 

The  Walt  Disney  Co.  last  week 
said  it  has  signed  separate  IT 
services  contracts  valued  at 
more  than  $1.3  billion  with 
IBM  and  Affiliated  Computer 
Services  Inc. 

A  $730  million  contract  with 
IBM  and  a  $610  million  deal 
with  ACS,  both  set  at  seven 
years,  will  allow  Disney  to 
shift  “certain  back-of-house 
IT  work”  to  IBM  and  ACS, 
said  Disney  spokeswoman 
Michelle  Bergman. 

She  said  that  the  affected 
Disney  IT  employees  will 
have  the  opportunity  to  be 


transferred  to  the  services 
vendors,  though  she  declined 
to  say  how  many  workers  will 
be  affected.  A  source  put  the 
number  at  1,000,  or  about  one- 
third  of  the  Burbank,  Calif.- 
based  company’s  IT  staff.  ACS 
confirmed  that  its  contract 
will  bring  about  500  Disney 
workers  into  its  fold. 

Bergman  said  that  Disney 
expects  the  move  to  “improve 
organizational  flexibility  and 
the  effectiveness  of  existing 
operations.” 

The  transition  will  take 
place  over  the  next  two 
months,  said  Bergman. 

IBM’s  Duties 

Under  its  agreement,  IBM  will 
support  Disney’s  IT  infra¬ 
structure,  which  consists  of 
mainframe  systems,  about 


3,700  Unix  and  Intel-based 
midrange  servers,  and  1.4  peta¬ 
bytes  of  data  storage,  accord¬ 
ing  to  IBM  spokesman  John 
Buscemi. 

Buscemi  said  IBM  will  be 
responsible  for  the  ongoing 
development  and  support  of 
key  Disney  software,  including 
its  SAP  implementation  and 
approximately  90  legacy  appli¬ 
cations  from  Disney’s  theme 
parks  and  its  resort  business. 
The  applications  will  be  sup¬ 
ported  on-site  at  Disney  facili¬ 
ties  as  well  as  at  an  IBM  appli¬ 
cation  center  in  Tulsa,  Okla., 
he  said. 

“Under  the  contract,  IBM 
will  centralize  some  opera¬ 
tions  and  standardize  process¬ 
es,  tools  and  methodologies 
across  Disney’s  diverse  com¬ 
puting  infrastructure,”  said 
Buscemi. 

He  added  that  the  new  con¬ 
tract  builds  on  a  long-term  re¬ 
lationship  that  was  expanded 
in  2001,  when  IBM’s  business 
consulting  services  unit  began 


work  to  consolidate  Disney’s 
finance,  human  resources  and 
payroll  services  onto  a  single 
SAP  software  platform. 

Support  From  ACS 

Meanwhile,  Dallas-based  ACS 
will  support  Disney’s  technol¬ 
ogy  infrastructure  and  net¬ 
work  architectures,  as  well  as 
provide  desktop  help  assis¬ 
tance  and  some  computer 
processing  services,  said  ACS 
spokeswoman  Lesley  Pool. 

As  part  of  the  deal,  approxi¬ 
mately  500  Disney  IT  workers 
“will  come  aboard  ACS  and 
support  Disney,”  said  Pool. 

“This  is  a  significant  oppor¬ 
tunity  to  provide  IT  outsourc¬ 
ing  services,”  Pool  said.  She 
pointed  out  that  the  agree¬ 
ment  will  enable  Disney  to 
focus  more  closely  on  its  core 
business  in  the  entertainment 
industry. 

“It  lets  us  pick  up  the  tech¬ 
nology  offerings  and  bring 
them  better  technology,  newer 
technology  and  take  their 


CEO  James  Crook  Jr.  in  a  June 
1  statement  announcing  the 
changes. 

“Fujitsu  Services’  decision 
to  withdraw  [IDX]  from  the 
‘common  solution’  and  to 
align  itself  with  another  pro¬ 
vider  for  the  southern  cluster 
is  disappointing,”  said  Crook. 
“We  believe  that,  together 
with  our  prime  contractor,  BT, 
we  have  overcome  numerous 
obstacles  in  delivering  on  the 
national  program.” 

In  the  statement,  Crook  pre¬ 
dicted  that  the  IDX  Carecast 
system  will  be  deployed  to  the 
London  region  later  this  year. 

Tola  Sargeant,  an  analyst 
at  London-based  research 
firm  Ovum  Ltd.,  said  Fujitsu’s 
move  to  remove  IDX  from 
the  regional  project  comes 
after  “some  well-documented 
delays”  in  the  rollout  of  the 
Carecast  software. 

“BT  has  clearly  had  signifi¬ 
cant  problems  fitting  IDX’s 
software  to  the  U.K.  system, 
and  we  find  it  hard  to  believe 
that  Fujitsu  and  Cerner  won’t 
face  many  of  the  same  chal¬ 
lenges,”  Sargeant  said  in  a 
note  regarding  the  project. 

©  54958 


IBM  WILL  BE  responsible  for 
development  and  support  of  an 
SAP  implementation  and  90 
applications  for  Disney’s  theme 
parks  and  its  resort  business. 


technology  folks  and  begin 
to  advance  them  in  their  tech¬ 
nology  career  paths,”  she  said. 

©  55046 
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Seagate  Adds  10  Disk  Drives  to  Product  Line 


PMR  technology 
gives  2.5-in.  drive  a 
25%  capacity  boost 

BY  LUCAS  MEARIAN 

Seagate  Technology  LLC  has 
unveiled  10  new  disk  drives, 
including  a  notebook  model 
that  uses  perpendicular  mag¬ 
netic  recording  (PMR)  tech¬ 
nology  that  boosts  the  capaci¬ 
ty  of  its  2.5-in.  drive  by  25%. 

With  its  announcement  ear¬ 
lier  this  month,  Seagate  be¬ 
came  the  latest  of  several  ven¬ 
dors  to  announce  drives  using 
the  new  PMR  technology, 
which  analysts  say  marks  the 
start  of  an  industry  shift  away 
from  45  years  of  longitudinal 
recording  technology. 

One  of  Seagate’s  new  prod¬ 


ucts  is  its  largest-capacity  disk 
drive  —  the  Barracuda  7200.9 
—  a  500GB  model  based  on 
standard  recording  technol¬ 
ogy.  The  high-end  system, 
which  includes  a  Serial  ATA  II 
interface,  will  ship  to  resellers 
by  September  for  a  price  of 
about  $400. 

The  first  PMR-based  prod¬ 
uct  that  Seagate  will  ship,  the 
Momentus  5400.3,  is  a  2.5-in., 
160GB  laptop  drive  with  25% 
more  capacity  than  the  ven¬ 
dor’s  previous  notebook  drive. 
It’s  slated  to  ship  in  next  year’s 
first  quarter. 

Other  Vendors’  Plans 

Seagate’s  entry  into  the  PMR 
business  follows  earlier  moves 
by  rivals  Toshiba  Corp.,  Fujit¬ 
su  Ltd.  and  Hitachi  Ltd. 


For  example,  Toshiba  plans 
to  ship  a  1.8-in.  drive  based 
on  PMR  this  quarter  and  ex¬ 
pects  to  ship  a  2.5-in.  drive 
for  laptop  computers  by  mid- 
2006,  Amy  Dalphy,  marketing 
director  for  Toshiba’s  hard 
drive  division  in  Tokyo,  said 
last  week. 

“We  see  a  strong  trend  for 
everything  to  want  to  be  mo¬ 
bile  and  to  want  to  have  more 
storage  capacity.  PMR  is  the 
jump  up  in  recording  capacity 
that  allows  us  to  do  that,”  Dal¬ 
phy  said.  Toshiba  has  no  im¬ 
mediate  plans  to  ship  enter¬ 
prise-class  disk  drives  using 
PMR  technology,  she  noted. 

Meanwhile,  Fujitsu  last 
month  disclosed  plans  to  start 
selling  a  PMR-based  2.5-in., 
200GB  drive  in  the  first  half  of 


2007.  And  earlier  this  month, 
Hitachi  Global  Storage  Tech¬ 
nologies  Inc.  disclosed  that  it 
was  testing  a  2.5-in.,  100GB 
PMR  drive  and  would  have  a 
3.5-in„  1TB  drive  out  by  2007. 

Mack  Kigada,  a  systems  en¬ 
gineer  at  Providence  Health 
System  in  Seattle,  said  PMR 
won’t  interest  him  unless  it 
gives  him  greater  read/write 
performance.  Kigada  said  he’s 
more  interested  in  smaller, 
faster  disks  than  denser,  large 
disks  for  his  data  center. 

“You  don’t  want  to  have 
large  disks,  or  you’ll  be  wast¬ 
ing  capacity,”  he  said.  “It’s  like 
having  a  big  pizza  that  you 
have  to  cut  into  many  tiny 
slices.  I’d  much  rather  have 
a  bunch  of  smaller  pizzas.” 

O  55011 


Paul  Kallender  of  the  IDG  News 
Service  contributed  to  this  story. 


NEW  PRODUCTS 


Seagate  Offerings 

■  A  hard  drive  with  ful! 
disk-based  data  encryption 

■  A  1-in.,  8GB  hard  drive 
for  handheld  devices 


■  An  8GB  CompactFlash 
Photo  Hard  Drive 

■  A  portable  120GB  drive 
with  a  USB  port  connector 

■  A  500GB  external  hard 
drive  and  FireWire  800 
interface  supporting  data 
rates  up  to  800Mbit/sec. 

■  A  40GB  drive  designed 
for  computers  in  automo¬ 
biles,  such  as  diagnostics 
and  navigation  systems 

■  A  low-power,  low-noise 
40GB  drive  for  gaming 
products 
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Well  that's  done. 

Happiness  is  a  dependable  Ricoh  color  printer. 


Ricoh  dependability  moves  your  ideas  forward. 
How  well  do  you  share? 


©2005  Ricoh  Corporation. 
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Microsoft  Pushes  Ahead  on  Virtualization,  Clustering 


BY  CAROL  SLIWA 

Bob  Muglia,  senior  vice  president  of 
Microsoft  Corp.’s  Windows  Server  divi¬ 
sion,  provided  an  update  on  the  compa¬ 


ny’s  plans  for  its  server  operating  sys¬ 
tem  and  related  products  during  an  in¬ 
terview  at  the  TechEd  2005  conference 
in  Orlando  this  month.  Excerpts  follow: 


Overheated? 


Plug  In 
The  Simple 
Solution. 


MovinCool  spot  air 
conditioners  are  the 
answer  to  your 
overheating  problems. 
Just  roll  it  in.  Plug  it  in. 
Turn  it  on.  It’s  that  simple. 


►  Up  to  60,000  Btu/h 
of  cooling  power 
right  where  and  when 
you  need  it 


►  Protects  against 
data  loss  and 
equipment  failure 


►  #1  in  portable 
air  conditioning 
for  over  30  years 


►  The  only 
portable  air 
conditioner 
ETL-verified 
for  performance 


MCMNCOOL 


THE  #1  PORTABLE  SPOT  COOLING  SOLUTION 
800-264-9573  or  visit  www.movincool.com 

©2005  DENSO  Sales  California.  Inc.  MovinCool,  SpotCool  and  Office  Pro  are  registered  trademarks  of  DENSO  Corporation. 


At  the  Windows  Hardware  Engineering  Con¬ 
ference  in  April,  Microsoft  said  it  was  lean¬ 
ing  toward  eliminating  your  virtualization 
server  software  as  a  stand-alone  product  in 
the  future.  Can  you  flesh  out  any  more  de¬ 
tails  on  the  plans?  Today,  we  have  a 
product  called  Virtual  Server  that  sits 
on  top  of  Windows  and  provides  virtu¬ 
alization  capabilities.  In  the  future, 
we’re  going  to  build  the  hypervisor 
and  the  virtualization  stack  into  Win¬ 
dows.  So  while  it’s  a  whole  new 
set  of  technologies,  much,  if  not 
all,  of  what  Virtual  Server  does 
today  goes  into  the  operating 
system.  It  becomes  an  operat¬ 
ing  system  feature.  At  the  same 
time,  we’re  building  a  whole  set 
of  management  services  that 
will  exist  under  [our]  System  ■  I  1 ' 
Center  [product  line].  I  do  1 1 1  ^ 

think  that  this  is  going  to  be  a 
new  product. 


And  it  still  is  the  time  frame.  When  we 
think  about  operating  system  genera¬ 
tions,  I  think  about  the  ’07  generations 


of  the  operating  system  —  say,  ’07  to 
’08  —  as  all  being  Longhorn,  maybe 
even  to  ’09  for  Longhorn  R2. ...  So  the 
virtualization  features  are  in  the  Long¬ 
horn  time  frame,  but  it’s  not  in  the  ini¬ 
tial  release  of  Longhorn. 


Microsoft  said  it  will  ship  a  Compute  Cluster 
Edition  of  Windows  Server  2003  in  the  first 
half  of  next  year.  Why  do  you  want  to  get 
into  the  high-performance  computing  mar¬ 
ket?  It’s  about  time.  It’s  one  of 
the  faster-growing  segments  of 
the  server  business. 


So  you’ll  have  a  product  with  management 
capabilities  for  virtualized  environments? 

Some  management  capabilities.  Patch¬ 
ing  of  images  and  image  deployment, 
that’s  in  [Systems  Management  Serv¬ 
er],  Monitoring  virtualized  systems, 
that’s  a  [Microsoft  Operations  Manag¬ 
er]  feature.  But  there  are  some  new 
features  that  are  very  important  from 
the  management  perspective,  like  mov¬ 
ing  virtualized  sessions  from  one  ma¬ 
chine  to  another.  We  don’t  have  a 
product  that  does  that  today. 


Will  the  built-in  virtualization  capabilities 
ship  with  the  Longhorn  version  of  Windows, 
or  after  Longhorn?  In  [April],  we  talked 
about  it  as  “the  Longhorn  time  frame.” 


How  different  will  the  cluster  edition 
be  from  the  other  versions  of  Win¬ 
dows  Server  2003?  It’s  the  same 
operating  system  with  two  dif- 
j  h  ferences.  One,  we  basically  turn 
™  off  a  bunch  of  workloads,  so  you 
can’t  do  a  bunch  of  other  things 
on  it,  because  it  will  be  priced  very 
competitively.  Pricing  on  this  will  actu¬ 
ally  be  less  than  the  Standard  Edition 
for  the  operating  system  piece  itself. 

Then  there’s  a  whole  set  of  services 
that  need  to  run  on  top  of  that  —  batch 
schedulers,  the  ability  to  connect  these 
computers  with  high-performance 
connections  and  those  [kinds  of] 
things.  Even  in  the  Linux  space  today, 
people  tend  to  buy  those  things  from 
commercial  companies,  and  they  pay  a 
fair  amount  for  it.  I  think  we’ll  have  a 
very  competitive  offering.  ©  55029 


READ  MORE  ONLINE 


An  extended  version  of  the  Q&A  with  Muglia 
is  available  on  our  Web  site: 

OQuickLink  54913 

www.computerworld.com 


Microsoft  Patches  Critical  Holes  in  IE,  Windows 


MICROSOFT  last  week  released  10  soft¬ 
ware  patches,  including  three  rated  “criti¬ 
cal,"  in  an  attempt  to  plug  security  holes 
in  a  variety  of  its  products. 

The  critical  fixes  issued  as  part  of  the 
software  vendor’s  monthly  patch  update 
include  one  for  a  flaw  in  Internet  Explorer 
that  could  allow  attackers  to  use  Web 
pages  containing  malicious  code  stored 
as  Portable  Network  Graphics  files  to 
gain  control  of  systems.  Microsoft  said 
it  also  found  similarly  dangerous  bugs 
in  the  Windows  HTML  Help  system  and 
its  Server  Message  Block  file-sharing 
protocol. 

Though  it  merited  only  a  “moderate" 


severity  rating,  a  bug  in  the  company’s 
Microsoft  Agent  user-interface  technolo¬ 
gy  is  potentially  serious  because  it  could 
let  attackers  gain  control  over  pop-up 
messages  and  trick  users  into  download¬ 
ing  malicious  code,  said  Russ  Cooper,  se¬ 
nior  scientist  at  IT  security  vendor  Cyber¬ 
trust  Inc.  in  Herndon,  Va. 

Stephen  Toulouse,  security  program 
manager  at  Microsoft’s  Security  Re¬ 
sponse  Center,  said  the  vulnerability  was 
rated  moderate  because  Agent  isn’t  al¬ 
ways  automatically  enabled  and  because 
the  flaw  doesn’t  directly  allow  attackers  to 
control  systems. 

-  Robert  McMillan,  IDG  News  Service 


IS  YOUR  WIRELESS  MESSAGING  GOOD  TO  GO? 

71 


<3rE'MA'1  eHX 

O'  RICH  ATTA 


O calendar 

<ST  CONTACTS 
(2f  NOTE5 

O  whipped  C* 


EAM 


Get  it  on  the  latest  handhelds  and  most  popular 
networks— all  with  an  intuitive  Outlook-like  interface. 


GoodLink”  enterprise  software  does  what  no  other  wireless  messaging  solution  can.  It  puts  the  familiar 
look,  feel,  and  functions  of  Microsoft"  Outlook®  on  a  variety  of  palmOS  and  Pocket  PC  handhelds-using 
all  the  most  popular  networks. 

With  Good,  you  can  also  wirelessly  enable  CRM,  ERP,  SFA,  and  other  business  applications.  All  with 
enterprise-class  security,  role-based  administration,  and  true  over-the-air  provisioning  and  management. 


Get  the  facts  now  with  a  FREE  mobile  wireless  information  kit. 
Call  877-346-6312  or  visit  www.good.com/freekit 


©2005  Good  Technology,  Inc.  Good,  Good  Technology,  the  Good  logo,  and  GoodLink  are  trademarks  or  registered  trademarks  of  Good  Technology,  Inc.  All  other  trademarks  are 
the  property  of  their  respective  owners. 


, 


HOW  DID  ONE  COMPANY  REDUCE 
ITS  TCO?  THEY  SWITCHED  FROM 
LINUX  TO  WINDOWS. 


Microsoft 


"When  we  calculated  the  total  cost  of 
ownership  for  Red  Hat  Linux  using 
a  10-year  Net  Present  Value  Model, 
we  were  surprised  at  how  much 
higher  it  was  than  for  Windows f" 


— J.E.  Henry,  CIO, 
Regal  Entertainment  Group 


Regal  Entertainment  Group,  the  largest  movie  theater  operator  in  the  U.S.,  ran  its  POS 
concession  and  ticket  terminals  on  Red  Hat  Linux.  However,  they  saw  that  it  lacked  the 
vendor  support  and  remote  management  tools  they  needed  to  support  their  strategic 
plans.  After  an  in-depth  comparison,  Regal  found  that  Windows  Embedded  would 
deliver  a  lower  TCO,  improved  security,  and  fewer  risks.  "With  Windows,  we  get  an 
integrated,  easily  managed  platform  that  can  extend  from  the  data  center  to  our  POS 
devices,"  says  Cliff  DeYoung,  CTO  at  Regal. 

To  get  the  full  case  study,  other  case  studies,  or  third-party  findings,  go 

to  microsoft.com/getthefacts 


Windows 
Server  System 


©  2005  Microsoft  Corporation.  All  rights  reserved.  Microsoft,  Windows,  the  Windows  logo,  and  Windows  Server  System  are  either  registered  trademarks  or  trademarks  of  Micr  osoft 
Corporation  in  the  United  States  and/or  other  countries.  The  names  of  actual  companies  and  products  mentioned  herein  may  be  the  trademarks  of  their  respective  owners. 
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DON  TENNANT 


Certifiably  Mad? 


W 

[QuickLink  54921],  created 
quite  a  stir.  A  lot  of  IT 
pros  think  I’m  mad  (in  the 
crazy  sense)  for  suggest¬ 
ing  that  certifications  have 
any  real  bearing  on  career 
advancement  and  com¬ 
pensation.  And  they’re 
mad  (in  the  angry  sense) 
that  people  like  me  are 
perpetuating  what  they 
believe  to  be  the  myth 
that  “certs”  deliver  any 
real  value  to  an  IT  organi¬ 
zation. 

A  sampling  of  reader  comments 
makes  clear  how  strongly  some  feel 
about  the  issue: 

■  “The  more  important  IT  be¬ 
comes,  the  more  the  nontechnical 
managers  will  want  to  have  authority 
over  it,  so  the  problem  of  determining 
who  is  really  good  at  IT  will  only  get 
worse.  For  organizations  in  which  the 
nontechie  overreachers  are  already  in 
control,  certification  is  a  crutch,  a 
poor  but  politically  defensible  substi¬ 
tute  for  knowing  what  and  how  well 
one’s  subordinates  are  doing.” 

*  “Those  who  have  built  their  repu¬ 
tations  the  hard  way  are  constantly  in 
demand  and  probably  don’t  have  time 
to  pursue  outside  certifications  be¬ 
cause  they  are  constantly  digging  into 
the  literature  and  on  the  phone  gain¬ 
ing  the  knowledge  necessary  to  han¬ 
dle  their  current  project  load.  Any 
certification  quickly  becomes  outdat¬ 
ed  and  will  not  impress  anybody  in 
a  busy  shop  except  the  human  re¬ 
sources  manager.” 

a  “I  think  there  is  very  little  corre¬ 
lation  between  certified  IT  skills  and 
quality  IT  work.  The  difficulty  is  that 
testable  knowledge  of  any  IT  disci¬ 
pline  is  only  a  small  subset  of  the 
skills  that  a  practitioner  needs.  These 
untestable  (or  difficult  to  test)  skills 
include  perseverance  (which  the  au- 


HOA.  You  just  never  know  what’s 
going  to  touch  a  nerve.  My  “Certi¬ 
fiably  Concerned”  editorial  last 
week,  in  which  I  argued  against  a 
de-emphasis  of  IT  certifications 


don  tennant  is  editor  in 
chief  of  Computerworld. 
You  can  contact  him  at 

don.tennantf 
computerworld.com. 


thor  mentions),  commu¬ 
nication  skills  and  prob¬ 
lem-analysis  skills.” 

■  “I’ve  worked  with  way 
too  many  certified  people 
who  couldn’t  cut  it.  From 
my  point  of  view  from  34 
years  in  the  trenches,  I’ll 
take  the  experience  any 
day. . . .  I’ve  had  a  number 
of  certs  over  the  years 
and  don’t  feel  they  had 
any  real  value  other  than 
using  them  to  try  to 
sound  impressive  to  someone  who 
doesn’t  know  any  better.” 

■  “I’ve  seen  too  many  MCSEs  who 
don’t  have  a  clue  in  the  real  world. 
(Not  to  mention  the  total  misuse  of 
the  word  engineer  in  that  certification. 
Of  course,  I’ll  admit  I’m  biased,  as  I 
graduated  as  an  electrical  engineer.)” 

■  “Technology  certifications  . . . 
mostly  serve  as  marketing  hype  for 
a  vendor  and  (gasp)  even  provide  a 
revenue  stream  to  that  vendor  and  its 
training  partners.  If  a  company  is  re¬ 
lying  heavily  on  certifications,  as  you 


advocate,  that  just  means  that  man¬ 
agement  is  not  exercising  appropriate 
oversight  of  their  staff  regarding  on¬ 
going  professional  development.  In 
effect,  such  oversight  and  coaching  has 
been  delegated  to  the  certification.” 

OK,  I  get  it.  You  don’t  have  to  hit 
me  with  a  brick.  Possessing  a  techni¬ 
cal  certification  doesn’t  necessarily 
equate  with  possessing  a  technical 
skill.  Certs  aren’t  a  substitute  for  real- 
world  experience.  I  couldn’t  agree 
more  with  either  point.  But  there 
needs  to  be  a  consistent,  quantifiable 
means  of  documenting  the  skills  as¬ 
sets  of  your  IT  organization.  Other¬ 
wise,  expanding  and  improving  that 
institutional  skill  set  will  be  an  ad  hoc 
activity,  and  efforts  to  optimize  the 
quality  and  productivity  of  your 
workforce  will  suffer. 

One  reader  called  technical  certifi¬ 
cation  “an  insurance  policy  that  pro¬ 
tects  our  essential  systems  and  infra¬ 
structure.”  Yes,  it’s  that  important.  If 
available  certifications  and  the  proc¬ 
esses  that  yield  them  aren’t  good 
enough,  demand  better.  Abandoning 
them  is  acquiescing.  And  acquies¬ 
cence  has  no  place  in  the  IT  profes¬ 
sion.  O  55056 


DAVID  MOSCHELLA 

Change  at 
Hand  for  PC 
Management 

HOW  DO  YOU  know 

when  a  best  practice  is 

about  to  give  way  to  a 
next  practice?  Typically,  you  look  for 
credible  signs  of  change  and  a  com¬ 
pelling  story  line  that  points  the  way 
toward  a  different  future.  Well,  if  you 
believe  in  those  two  criteria,  you  might 
want  to  start  to  rethink  the  way  your 
company  manages  its  PCs. 

Since  the  beginnings  of  the  client/ 
server  era  in  the  mid-1980s,  organiza¬ 
tions  have  sought  to  standardize  their 
PC  configurations  to  minimize  instal¬ 
lation,  support  and  migration  costs  and 
to  ensure  a  consistent  application  and 
security  environment.  Clearly,  these 
remain  important  company  goals,  and 
not  surprisingly,  this  practice  has  be¬ 
come  pervasive  in  the  marketplace.  It 
still  makes  sense  for 
most  enterprises. 

However,  there  is 
growing  evidence 
that  this  one-size- 
fits-all  approach  is 
starting  to  break 
down  and  may  not 
be  nearly  as  efficient 
as  you  might  think. 

Over  the  years,  lap¬ 
tops,  handhelds  and 
cell  phones  have  all 
become  powerful  ob¬ 
jects  of  fashion  and 
desire,  and  many  of 
your  most  valuable 
employees  simply  won’t  be  happy 
with  standard-issue  devices.  They  are 
clearly  looking  for  more  flexibility  and 
choice. 

More  important,  many  of  these  same 
employees  have  shown  that  they  are 
perfectly  willing  to  spend  their  own 
money  on  IT  products  and  services  if 
that  helps  them  do  their  jobs  in  a  more 
effective  or  satisfying  manner.  Given 
today’s  tight  IT  budgets,  this  factor 
shouldn’t  be  underestimated,  especial¬ 
ly  since  individual  consumers  will  of¬ 
ten  get  much  more  for  their  money 
than  the  typical  corporate  purchasing 
department  does.  The  idea  that  cen¬ 
tralized  PC  acquisition  will  save  mon¬ 
ey  has  been  obsolete  for  many  years. 

Over  the  past  year,  we  have  seen 
several  multinational  companies  begin 
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PROFESSIONAL  SERVICES 
Information  Availability  Assessment 
E-Mail  Compliance  Assessment 
Security  Penetration  Analysis 


The  power  is  always  on.  The  systems 
are  always  ready.  The  data  is  always 
there.  That's  Information  Availability. 

In  today's  “get-it-done-now”  business 
environment,  Information  Availability 
is  no  longer  an  option,  it's  a  necessity. 
Which  is  why  you  need  a  company 
like  SunGard  on  your  side.  We've 
been  keeping  people  and  information 
connected  for  the  past  25  years. 

We've  seen  what  can  go  wrong  and  we 
know  how  to  prevent  it.  Information 
Availability  from  SunGard  means 
always  having  access  to  what  you 
need  when  you  need  it. 


MESSAGING  AND  COLLABORATION  SERVICES 
Hosted  Exchange 
Archiving  Service  for  Messaging 
E-Mail  Availability  Services 


OUR  MESSAGING  AND 
COLLABORATION  SERVICE 
KEEPS  E-MAIL  GOING. 

Perhaps  the  most  important  part  of 
Information  Availability  is  e-mail 
availability.  A  whopping  60%  of 
business  critical  information  is 
communicated  via  e-mail  and  stored 
in  corporate  messaging  systems. 

So  it's  never  been  more  crucial  to 
have  a  reliable  e-mail  availability 
solution.  Our  Messaging  and 
Collaboration  Service  is  just  that 
solution.  It  can  manage,  distribute, 
replicate,  recover  and  archive 
e-mail  on  an  enterprise-wide  basis. 
By  letting  us  host  your  Microsoft 
Exchange  we  can: 

•  Offer  constant  e-mail  availability 
to  keep  employees,  customers  and 
suppliers  connected  24/7. 

•  Let  you  maintain  control  and 
flexibility  to  add  or  delete  users 
at  any  time. 

•  Deliver  a  highly  scalable 
solution  with  no  limit  on  the 
number  of  mailboxes. 

•  Eliminate  the  worry  of  managing 
upgrades,  patches  or  fixes. 

•  Provide  a  seamless  migration 
from  Microsoft  Exchange 
2000  and  5.5  to  Microsoft 
Exchange  2003. 


But  perhaps  best  of  all,  when  you  let 
SunGard  host  your  Microsoft  Exchange, 
you  can  save  an  average  of  25%  versus 
doing  it  yourself.  Research  indicates 
the  average  annual  cost  of  internal 
e-mail  ownership  per  mailbox  is  $317* 
With  SunGard  the  cost  is  only  $199. 
That's  a  savings  of  $118  per  mailbox, 
per  year.  We  can  also  provide  end-to- 
end  messaging  solutions  throughout 
the  information  flow,  from  creation  to 
archiving  to  deletion.  And 
speaking  of  archiving, 
our  Archiving  Service  for 
Messaging  gives  you 
even  more  benefits: 

•  The  assurance  of 
knowing  that  the 
integrity  of  your 
data  is  maintained. 

•  The  ability  to 
instantly  retrieve 
information  when 
you  need  it. 


•  The  experience  and  technical 
expertise  to  help  you  deal  with 
compliance  and  implementation 
challenges. 

GET  THE  SUPPORT  YOU 
NEED  WITHOUT  GIVING  UP 
THE  CONTROL  YOU  WANT. 

By  utilizing  our  hardened  global 
facilities  to  run  your  applications, 
you'll  have  unlimited  access  to  your 
most  critical  data.  You'll  also  retain 
complete  control  of 
your  applications  and 
information,  which  will 
ultimately  give  you 
peace  of  mind  knowing 
that  the  information 
you  need  is  always 
within  your  reach. 


SAVE 
$118  PER 
MAILBOX, 
PER  YEAR 
WITH 

SUNGARD* 


* The  Radicati  Group.  Radicati  White  Paper  “Microsoft  Exchange  2003  Total  Cost  of  Ownership. 
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and  Information 
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INFORMATION  AVAILABILITY.  IT  MEANS 
MORE  BUSINESS  FOR  YOUR  BUSINESS. 

To  truly  appreciate  the  value  of  having  an  Information 
Availability  solution,  all  you  have  to  consider  is  the  fact 
that  alt  of  your  business  processes  are  incredibly 
connected.  The  loss  of  data,  no  matter  how  minute,  can 
disrupt  everything  in  your  supply  chain.  Which  is  why 
more  and  more  companies  are  no  longer  willing  to  go  it 
alone.  They're  relying  on  SunGard  instead.  For  years, 
companies  have  trusted  us  to  restore  their  IT  systems 
when  something  went  wrong.  So  it's  not  surprising  that 


us  to  mitigate  risk  and 


down  in  the  first  place. 


We  have  over  70  state-of- 

the-art  hardened  facilities  worldwide  with  over  20,000 
end-user  workstations.  We  are  platform  neutral.  We  have 
the  back-up  systems,  technology  and  people  in  place  to 
manage,  monitor  and  maintain  your  infrastructure  24/7 
on  a  global  basis.  With  SunGard  as  your  Information 
Availability  provider,  your  systems  will  run  on  redundant 
power  sources  with  redundant  hardware  connections  at 
a  network  operations  center  that  has  best-in-class 
security  procedures.  Plus  you  can  relax  knowing  that  . 
everything  we  do  will  help  you  meet  your  compliance 
demands  no  matter  what  industry  you  happen  to  be  in. 
And  we  can  do  it  all  for  approximately  25%  less  than 
what  it  would  take  to  build  the  infrastructure  yourself. 


To  receive  a  free  copy  of  our 
white  paper  “PROTECTING  E-MAIL 
AND  SECURING  PRODUCTION 
AVAILABILITY"  just  call 
1-800-468-7483  or  log  on  to 
www.availability.sungard.com/mcs. 


THE  BOTTOM  LINE  IS  THAT 
WITH  INFORMATION  AVAILABILITY 
FROM  SUNGARD  YOUR  BUSINESS 

IS  ALWAYS  ON.  NO  MATTER  WHAT. 


SUNGARD  Peo?le 

^  mmm  and  Information 

Availability  Services  I  Connected. 
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to  experiment  with  various  allowance 
and  cafeteria-style  programs,  where 
employees  are  given  money  to  spend 
on  technology  and  the  option  of  sup¬ 
plementing  it  with  their  own  money  if 
they  want  a  more  capable  or  aestheti¬ 
cally  pleasing  device.  This  is  pretty 
much  the  way  that  many  company-car 
programs  work  here  in  London. 

The  result  is  device  diversity,  but 
that’s  becoming  much  more  manage¬ 
able  as  companies  migrate  toward  pure 
Web-based  environments,  where  the 
need  for  client-specific  software  large¬ 
ly  goes  away.  Clearly,  global  enterpris¬ 
es  are  at  very  different  stages  of  this 
transition,  but  the  overall  goal  is  wide¬ 
ly  recognized  and  shared.  Once  Web- 
enabled  applications  become  perva¬ 
sive,  pretty  much  any  PC  —  even  Mac¬ 
intoshes  —  can  support  the  industry- 
standard  office,  e-mail,  browser  and 
security  software. 

As  these  shifts  occur,  companywide 
PC  service  contracts  will  likely  lose 
their  appeal.  Already,  many  company 
help  desks  are  shifting  away  from  tra¬ 
ditional  break/fix  tasks  and  are  in¬ 
stead  responding  to  more  complex 
“How  do  I ...  ?”  questions.  In  these 
cases,  having  a  standard  machine  is 
largely  irrelevant.  In  the  odd  case 
where  a  PC  does  physically  break  or 
require  basic  desktop  software  sup¬ 
port,  on-demand  services  such  as 
Geeks  On  Call  can  provide  more  cost- 
effective  alternatives. 

None  of  this  should  be  surprising. 
Companies  are  increasingly  opting  for 
menu-based  benefits  programs  as  a 
way  to  more  efficiently  meet  their  em¬ 
ployees’  needs.  It  isn’t  hard  to  envision 
a  future  where  many  employees  are 
happy  to  provide  their  own  PCs,  much 
as  they  already  do  at  many  universi¬ 
ties.  Someday,  we  will  no  more  expect 
our  companies  to  pay  for  and  fix  our 
PCs  than  we  would  expect  them  to  fix 
our  cars.  Then  we  will  have  truly  per¬ 
sonal  computers,  and  the  real  company 
savings  will  begin.  ©  54975 

VIRGINIA  ROBBINS 

It  Takes  a 

Tough  IT 
Department 

T’S  NOT  SUPPOSED  to 
rain  in  Northern  Califor¬ 
nia  in  June,  but  it  was.  My 

new  2-year-old  dog,  a  74-pound  black  i 


flat-coated  retriever  named 
Charlie,  eats  shoelaces  if  he 
doesn’t  get  enough  exercise, 
and  I  was  running  out  of 
shoes.  Proving  that  misery 
really  does  love  company,  I 
persuaded  my  husband  to 
join  us,  and  out  into  the  rain 
we  went. 

As  Charlie  bounced 
from  tree  to  tree  hunting 
for  squirrels,  my  husband 
and  I  chatted.  I’d  been  trav¬ 
eling  over  the  past  couple 
of  weeks,  and  we  had  lots  to 
catch  up  on.  His  father  was 
doing  well;  my  last  flight  had  been  de¬ 
layed  only  an  hour.  Eventually,  we  got 
around  to  work. 

I  told  him  how  I’ve  had  an  opportu¬ 
nity  to  be  involved  in  company  evalua¬ 
tions,  an  activity  similar  to  one  that  I 
had  experienced  four  years  ago.  Over 
the  past  four  years,  the  way  in  which 
IT  is  valued  has  changed  dramatically. 
Back  then,  valuation  teams  assumed 
that  IT  departments  were  run  more 
like  a  dot-com,  lacking  governance, 
procedures  and  process.  IT  has  ma¬ 
tured  a  great  deal  since  then.  Best 
practices  in  governance,  operational 
controls  and  cost  allocations,  along 
with  other  improvements,  have  been 
implemented. 


Today,  most  IT  depart¬ 
ments  have  absorbed  Inter¬ 
net  technologies  and  im¬ 
proved  operations.  What 
has  changed  is  that  we  are 
more  alike  in  our  practices 
than  we  were  in  the  past. 

In  fact,  doing  IT  well  no 
longer  creates  value.  In¬ 
stead,  value  is  reduced 
when  IT  is  not  done  well. 
IT  is  no  longer  assumed 
to  add  value;  it’s  assumed 
only  that  it  could  take  it 
away. 

Simply  put,  doing  IT  well 
has  become  a  commodity.  In  the  U.S., 
once  something  is  seen  as  a  commodi¬ 
ty,  we  Wal-Mart  it:  Price  becomes  the 
primary  differentiator. 

When  price  is  the  only  thing  that 
matters,  then  businesses  move  their 
operations  to  the  lowest-cost  provider. 
The  offshoring  of  development  was 
first;  next  on  the  list  is  infrastructure. 
Infrastructure  outsourcing  has  been 
declared  by  many  as  the  next  new 
thing  in  IT  cost  savings.  Already,  a  few 
large  firms  are  moving  to  outsource 
their  infrastructures. 

So,  unless  you  want  to  work  outside 
of  IT,  you  have  two  choices:  Be  out¬ 
sourced,  or  think  like  the  late  Frank 
Perdue.  Remember  him?  If  you  lived 


east  of  the  Mississippi  River  in  the 
1970s  or  ’80s,  you  probably  caught  his 
TV  ads;  he  was  the  homely-looking 
CEO  who  sold  chickens.  Before  Perdue 
started  personally  hawking  his  brand, 
chicken  was  seen  as  a  commodity.  He 
changed  that  through  clever  market¬ 
ing.  It’s  been  at  least  15  years  since  I’ve 
been  back  east,  but  I  can  still  remem¬ 
ber  Perdue’s  slogan:  “It  takes  a  tough 
man  to  make  a  tender  chicken.” 

What’s  your  slogan?  Is  it  “Cutting 
costs  daily  because  the  CFO  told  me 
to”?  Doing  IT  well  isn’t  enough  any¬ 
more,  because  others  can  do  the  same 
at  a  lower  cost.  You  need  to  be  looking 
at  what  you’re  doing  and  making  sure 
that  it’s  not  just  IT  done  well,  but  IT 
done  well  with  a  consistent  marketing 
message.  It  really  is  all  about  market¬ 
ing.  At  Chela,  a  customer-focused  stu¬ 
dent  loan  provider,  my  department’s 
slogan  is  “We’re  in  IT  for  the  stu¬ 
dents.”  Very  few  can  take  care  of  our 
students  as  well  as  we  do. 

What’s  your  slogan?  Without  one, 
you  could  be  like  Charlie  chasing 
squirrels  in  the  rain.  It’s  a  lot  of  work 
without  much  reward.  ©  54969 
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Laggards’  Rationale 

JUST  A  NOTE  on  the  story 
“Wireless  Leaders  &  Laggards: 
Financial  Services”  [QuickLink 
53680]:  Many  examiners  are  ada¬ 
mant  that  banks  cannot  use  wire¬ 
less  because  of  the  threat  to  infor¬ 
mation  security.  When  I  worked  IT 
in  a  bank  in  Arkansas,  the  examin¬ 
ers  were  so  convinced  wireless  was 
the  undoing  of  all  security  that  man¬ 
agement  adopted  a  policy  outlaw¬ 
ing  wireless,  along  with  PDAs. 

J.  Melancon 
Baton  Rouge,  La. 

Comfort  Is  Key  for 
Health  Providers 

FOUND  THE  ARTICLE  “Wireless 
Leaders  &  Laggards:  Health 
Care”  [QuickLink  53683]  very  inter¬ 
esting,  but  I  think  the  point  has  to 
be  made  that  health  care  has  been 
several  years  behind  other  indus¬ 
tries  in  the  realm  of  IT  because  of 
the  nature  of  our  business.  In  health 


I 


care,  the  bulk  of  a  workforce  is  mo¬ 
bile  within  a  facility,  making  tradi¬ 
tional  wired  architectures  infeasible. 

When  I  joined  The  Jackson  Clin¬ 
ic,  a  140-physician  practice  spread 
throughout  western  Tennessee, 
back  in  1998,  it  had  just  purchased 
an  electronic  medical  records  sys¬ 
tem,  Physicians'  Workstation  by 
Wang  Healthcare  (now  Integrated 
Healthware).  The  next  year  was 
spent  planning,  building  and  con¬ 
figuring  the  base  infrastructure  to 
prepare  for  the  physicians’  transi¬ 
tion  from  a  paper-based  system  to 
an  electronic  one.  We  found  that 
physicians  don't  want  to  seem  pre¬ 
occupied  when  sitting  in  front  of 
patients.  Leafing  through  a  paper 
chart  is  acceptable,  but  a  monitor 
creates  the  perception  of  a  barrier. 

In  addition,  the  patient  can’t  tell  if 
the  physician  is  accessing  medical 
information,  playing  a  game  or 
sending  e-mail. 

From  1999  until  2002,  our  physi¬ 
cians  used  the  EMR  strictly  as  a 
look-up  tool.  It  wasn't  until  late 


2002,  with  the  debut  of  the  tablet 
PC,  that  we  were  able  to  put  a  de¬ 
vice  in  physicians’  hands  that  they 
felt  comfortable  taking  into  an  exam 
room.  Since  a  widespread  wireless/ 
tablet  deployment  at  the  end  of 
2002,  our  chart  has  been  complete¬ 
ly  electronic. 

Mobile  computing  has  finally 
evolved  to  the  point  where  health 
care  can  realize  some  of  the  pro¬ 
ductivity  and  cost  savings  that  most 
other  industries  have  been  enjoying 
through  their  wired  architectures  for 
decades.  The  challenges  we  face  no 
longer  stem  from  technological  limi¬ 
tations;  we  now  have  available  to 
us  innumerable  solutions  in  order  to 
deal  with  just  about  any  connectivi¬ 
ty,  security,  bandwidth  or  other  re¬ 
quirements  that  we  might  meet. 

A  shift  has  occurred  away  from 
the  limitations  of  technology.  In¬ 
stead,  health  care  finds  itself  faced 
with  the  challenge  of  providing 
these  new  solutions  to  physicians  in 
a  way  that  doesn't  overwhelm  and 
distract  them  from  providing  high- 


quality  care.  The  trick  is  to  get 
physicians  to  use  the  technology 
without  having  to  spend  time  think¬ 
ing  about  it.  Our  physicians  have 
been  prescribing  electronically  for 
over  a  year  now,  but  we  still  have 
a  ways  to  go  to  get  to  the  point 
where  providers  feel  comfortable 
enough  to  do  all  documentation  at 
point  of  care. 

Mark  Wiacek 

Network  manager,  The  Jack- 
son  Clinic  PA,  Jackson,  Tenn. 
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CHRISTOPHER  PESOLA  Was  SO 
eager  to  see  how  well  the  up¬ 
grade  wizard  Microsoft  Corp. 
supplied  would  migrate  Visual 
Basic  6  applications  to  its  new 
.Net  development  environ¬ 
ment  that  he  tried  a  beta  re¬ 
lease  in  early  2002. 

Pesola,  associate  director  of  application  services  at 
Learning  Care  Group  Inc.,  would  eventually  learn 
that  the  tool  could  convert  75%  to  80%  of  the  VB6 
code  in  the  Novi,  Mich.-based  company’s  lightweight 
applications  —  those  with  fewer  than  1,500  lines  of 
code.  But  it  would  fare  much  worse  with  the  major 
VB6  application  that  its  470  day-care  centers  use  to 
run  their  operations,  migrating  just  20%  of  the  code. 
“That  just  wasn’t  worth  it  for  us,”  Pesola  says. 
Increasing  numbers  of  IT  shops  are  confronting 
the  decision  of  whether  to  modernize  their  aging 
VB6  code.  In  some  cases,  that’s  because  Microsoft 
ended  the  free  mainstream-support  phase  for  its 
VB6  tool  as  of  March  31.  Over  7,000  people  —  includ¬ 
ing  more  than  250  Most  Valuable  Professionals  that 
Microsoft  has  honored  for  their  contributions  to 
technical  communities  —  have  signed  an  online 
petition  since  March  to  urge  Microsoft  to  continue  to 
support,  develop  and  update  the  core  VB  language. 

The  uproar,  at  least  in  part,  stems  from  the  sub¬ 
stantial  changes  between  the  old  and  new  VB  devel¬ 
opment  environments.  VB.Net  makes  use  of  a  differ¬ 
ent  runtime,  different  class  libraries  and  a  different 
object  model.  And  developers  often  face  a  moderate- 
to-steep  learning  curve  to  master  the  .Net  Frame¬ 
work  and  shift  to  the  object-oriented  programming 
model  that  will  enable  them  to  reap  the  full  benefits 
of  the  new  environment. 

Microsoft  has  shown  no  signs  of  caving  to  the  de¬ 
mands  of  the  protesters,  maintaining  that  they  repre¬ 
sent  a  minority  of  the  millions  of  VB  developers. 
More  users  prefer  the  new  tools,  especially  for  build¬ 
ing  Web-based  applications,  the  company  says. 
Nonetheless,  Microsoft  has  pledged  to  improve  its 
migration  tools  and  the  interoperability  between 
VB6  and  VB.Net,  which  will  be  called  VB  2005  with 
the  next  release,  due  in  November. 

Companies  will  continue  to  weigh  their  various 
options  in  the  interim.  They  can  run  their  VB6  appli¬ 
cations  until  they  lose  their  usefulness.  They  can  use 
the  .Net  upgrade  wizard  and  rewrite  code  that  does 
not  automatically  convert.  They  can  migrate  parts  of 
an  application  to  .Net  and  leave  parts  in  VB6.  They 

Continued  on  page  28 
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Learning  Care  Group’s  CHRISTOPHER  PESOLA  faces  big  decisions  about  his  VB6  applications. 


WHICH  PATH  TO  TAKE?  MIGRATE  APPLICATIONS  TO  .NET,  OR  REPLACE,  REWR 
OR  JUST  REUSE  THEM?  THE  BEST  CHOICE  OFTEN  DEPENDS  ON  THE  QUALITY  C 
YOUR  VB6  CODE  AND  THE  EXPERIENCE  OF  YOUR  STAFF.  BY  CAROL  SLIWAY 


Where  IP  and  telecom  unite. 
Where  security  is  offensive,  not  defensive. 
Where  e-commerce  is  safe  commerce. 
Where  content  is  mobile  and  personal. 

Where  infrastructure  is  more  intelligent. 
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VeriSign;  Where  it  all  comes  together 


Billions  of  .t.imes  each  day,  the  world  interacts  with  a  company  you  may  not  realize  is  there.  One  that  is  driving  dynamic  transformations  at  the 
very  core  of  commerce  and  communications.  VeriSign.  Through  our  Intelligent  Infrastructure  Services,  we  enable  businesses  and  individuals  to 
find,  connect,  secure,  and  transact  across  today's  complex  Internet,  telecom,  and  converged  networks.  We  operate  the  systems  that  manage 
.com  and  .net,  handling  14-billion  Web  addresses  and  emails  every  day.  We  run  one  of  the  largest  telecom  signaling  networks  in  the  world, 
enabling  services  such  as  cellular  roaming,  text  messaging,  caller  ID.  and  multimedia  messaging.  We  manage  network  security  services  for  over 
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can  rewrite  an  application  in  VB.Net  or  another  lan¬ 
guage,  such  as  C#  or  Java.  Or  they  can  replace  it. 

Microsoft  says  an  IT  shop  is  likely  to  try  each  of 
those  approaches  at  one  time  or  another,  with  the  de¬ 
cision  largely  dependent  on  the  quality  of  the  VB6 
code  and  the  application’s  business  value. 

Learning  Care  Group  tried  Microsoft’s  code 
adviser  and  upgrade  wizard  with  all  six  of  its  VB6 
applications.  The  tools  analyzed  the  code  line  by  line, 
changed  the  portions  that  it  could  migrate  to  .Net 
and  flagged  the  portions  that  it  couldn’t  migrate, 
Pesola  says.  The  company  then  had  the  option  of 
rewriting  the  problem  parts  in  VB6  and  trying  the 
wizard  again,  or  rewriting  them  in  .Net. 

Pesola  chose  to  rewrite  portions  of  a  small  customer 
service  call-logging  application  and  spent  about  five 
days  developing,  deploying  and  testing  it.  But  that 
was  the  only  time  Learning  Care  chose  that  migra¬ 
tion  route.  The  company  replaced  two  VB6  applica¬ 
tions  with  packaged  software.  It’s  looking  for  a  better 
option  for  an  application  used  by  its  finance  group. 
And  it  realized  that  one  VB6  application  was  no  longer 
used  very  much  and  decided  to  leave  it  running  as  is. 

For  its  largest  day-care  center  management  appli¬ 
cation,  Learning  Care  put  out  a  request  for  proposals 
after  finding  that  only  10%  to  20%  of  the  code  would 
convert.  Pesola  says  he  tried  through  rewrites  to 
boost  the  number  to  50%.  But  when  he  got  to  about 
25%,  he  realized  that  it  wasn’t  worth  the  effort  be¬ 
cause  of  the  application’s  functionality  limitations. 
Learning  Care  paid  about  $1  million  for  a  newly  ar¬ 
chitected  .Net-based  application  from  NuSoft  Solu¬ 
tions  Inc.,  a  Microsoft  Gold  Certified  Partner  in  Troy, 
Mich.,  and  hopes  to  maintain  the  application  on  its 
own  within  the  next  year  or  two,  Pesola  says. 

The  decision-making  process  will  be  far  more  in¬ 
volved  for  A.G.  Edwards  Inc.  The  St.  Louis-based 
brokerage  has  about  700  VB6  applications,  and  so  far 
it  has  migrated  only  about  a  half-dozen  to  either  Java 


or  VB.Net,  according  to  David  Strick¬ 
land,  the  company’s  enterprise  portfo¬ 
lio  architect. 

Strickland  says  he  can’t  see  the 
point  of  tweaking  VB6  applications 
merely  to  get  them  to  run  on  the  .Net 
Framework.  He  wants  the  company  to 
convert  its  client/server  applications 
to  well-architected  multitier  applica¬ 
tions  that  can  better  take  advantage 
of  .Net’s  new  capabilities. 

Since  65%  of  A.G.  Edwards’  190  pro¬ 
grammers  work  in  VB6,  shifting  de¬ 
velopers  to  the  new  environment  will 
be  just  as  critical  as  moving  the  appli¬ 
cations.  The  company  is  setting  up  a 
competency  center  to  help  its  develop¬ 
ers  get  up  to  speed  not  only  on  the  .Net  Framework  but 
also  on  a  new  language.  Strickland  views  Microsoft’s 
C#  language  as  a  better  strategic  choice  than  VB.Net, 
since  from  a  syntax  perspective,  it’s  more  similar  to 
Java,  the  language  the  rest  of  the  company’s  develop¬ 
ers  use.  “If  I  move  to  C#,  the  VB  guys  can  get  there 
easier  because  the  platform’s  kind  of  the  same.  They’re 
used  to  the  tool  set,”  he  says.  “And  the  Java  guys  can 
get  there  fairly  easily  because  the  syntax  is  the  same.” 

A.G.  Edwards  recognizes  that  it  will  likely  have  to 
do  lots  of  new  coding  to  replace  its  old  VB6  applica¬ 
tions.  The  company  is  also  exploring  the  possibility 
of  bringing  in  a  vendor  to  help  with  a  “double  hop,” 
migrating  first  to  VB.Net  and  then  to  C#,  Strickland 
says.  Other  VB6  applications  likely  will  be  decom¬ 
missioned  or  replaced  with  packages,  he  adds. 

With  typical  client/server  applications,  “where 
everything’s  entangled,”  the  choice  is  often  to  leave  the 
application  alone  or  replace  it,  says  Carl  Zetie,  an  an¬ 
alyst  at  Forrester  Research  Inc.  But  an  IT  shop  has  a 
good  chance  of  extracting  usable  interfaces  with  a 
well-architected  VB6  application  that  has  presentation, 
business  logic  and  database  layers. 


That’s  the  situation  Berkshire  Life 
Insurance  Company  of  America 
found  itself  in  with  its  three-tier  dis¬ 
ability  income  insurance  claims  sys¬ 
tem.  The  Pittsfield,  Mass.-based  sub¬ 
sidiary  of  The  Guardian  Life  Insur¬ 
ance  Company  of  America  could  mi¬ 
grate  its  VB6  application  a  layer  at  a 
time,  leaving  pieces  in  VB6  when 
there  was  no  compelling  business 
reason  to  upgrade  to  .Net. 

Developers  started  at  the  back  end, 
rewriting  the  data  access  layer  in 
C#  and  ADO.Net,  a  shift  that  helped 
to  improve  the  data  access  perfor¬ 
mance  by  about  20%,  according  to 
Tim  Murray,  a  systems  analyst.  De¬ 
velopers  also  found  themselves  more  productive  in 
the  new  environment,  because  the  .Net  Framework 
handles  more  of  the  plumbing  code. 

Berkshire  Life  is  now  in  the  process  of  migrating 
the  presentation  layer  to  .Net,  but  developers  left  the 
business  logic  in  VB6  because  they  saw  no  benefit  to 
migrating  more  than  100,000  lines  of  business  logic 
“that  basically  works,”  says  Bill  Chandler,  second 
vice  president  of  corporate  systems  at  Berkshire  Life. 

“Nothing  in  .Net  would  change  the  way  we  wrote 
those  rules,”  says  Murray. 

.Net’s  Component  Object  Model  (COM)  Interop 
feature  enables  the  team  to  maintain  references 
to  the  old  VB6  Dynamic  Link  Libraries.  The  com¬ 
pany  encountered  “DLL  hell”  when  the  application 
couldn’t  find  the  old  libraries  it  needed  in  only  a  few 
cases  with  third-party  DLLs.  To  work  around  the 
problem,  they  put  VB6  wrappers  around  those  DLLs, 
says  Murray. 

“Overall,  we’ve  had  a  very  positive  experience  with 
.Net  and  its  interoperability  with  VB6,”  says  Scott 
Dougherty,  another  systems  analyst  at  Berkshire  Life. 

Jackie  Goldstein,  principal  at  Renaissance  Comput¬ 
er  Systems  Ltd.,  a  Hashmonaim,  Israel-based  member 
of  Microsoft’s  Regional  Director  program,  says  he 
has  had  “ridiculous  conversations”  with  clients  who 
have  asked  him  to  help  them  come  up  with  a  plan  to 
migrate  millions  of  lines  of  code.  He  tells  them  that’s 
not  what  they  should  be  doing.  Wrappers  that  are  au¬ 
tomatically  generated  for  existing  COM  DLLs  work 
fine  in  most  cases,  and  only  occasionally  do  they  re¬ 
quire  “a  little  fix-up  work”  or  an  adapter,  he  says. 

“When  migrating,  rewriting  or  converting,  there’s 
no  silver  bullet,”  Goldstein  says.  “Before  you  worry 
about  migrating  lines  of  code,  you  should  spend  time 
thinking  about  the  architecture.  You  want  to  do  it  in¬ 
crementally.” 

Billy  Hollis,  a  Regional  Director  program  member 
who  owms  Next  Version  Systems,  a  consultancy  in 
Nashville,  says  a  thorough  code  review  is  critical  for 
any  company  moving  to  .Net.  He  says  the  tendency 
of  VB6  developers  is  to  write  code  to  fix  a  problem. 
But  they  need  to  learn  to  write  less  code  and  let  the 
.Net  Framework  do  the  work  for  them. 

“You  might  spend  three  hours  to  research  the 
framework  and  find  something  that  does  90%  to 
100%  of  what  you  want,”  Hollis  says.  “Or  you  might 
have  to  extend  the  framework,  but  that’s  typically 
more  efficient  and  effective  than  writing  code  from 
scratch.”  ©  54838 
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Advice  From  the  Source 


Microsoft  advises  companies  to  evaluate  the  code  quality 
and  business  value  of  their  Visual  Basic  6  applications 
when  deciding  if  it’s  worth  the  effort  to  migrate  them  to 
the  .Net  development  platform. 

The  company  says  migration  exercises  have  shown 
that  the  overwhelming  factors  in  predicting  the  success  of 
a  migration  project  are  the  initial  quality  of  the  code  and 
the  developers’  experience  in  working  with  the  .Net 
Framework. 

Developers  are  advised  to  first  migrate  a  VB6  applica¬ 
tion  in  discrete  pieces,  such  as  the  presentation  layer,  and 
run  the  rest  of  it  through  the  COM  Interop  feature. 

In  its  white  paper  titled  “Visual  Basic  Application 
Migration  Strategy,”  Microsoft  notes  the  following  four 
modernization  options  for  complete  applications  or  parts 
of  applications.  The  company  says  that  many  enterprise 
applications  will  use  more  than  one  of  these  strategies. 

MIGRATE:  Chances  are  that  a  VB6  application  can 


I 


be  migrated  if  it  meets  current  business  needs  and  the 
code  quality  is  good.  Jay  Roxe,  a  VB  product  manager, 
says  work  done  with  about  30  enterprise  customers  at 
Microsoft’s  labs  in  Redmond,  Wash.,  has  shown  that 
60%  to  90%  of  the  VB6  code  can  be  migrated  to  .Net 
using  the  code  adviser  and  upgrade  wizard. 

REUSE:  If  the  application  contains  well-factored 
business  logic  that  won’t  migrate  well,  those  pieces  can 
be  used  through  COM  Interop  while  others  are  migrated. 

REWRITE:  If  a  VB6  application  lacks  the  structure 
and  quality  to  be  effectively  migrated,  developers  should 
mine  and  analyze  the  business  rules  and  data  structures 
to  provide  the  starting  point  for  the  rewrite. 

REPLACE:  If  VB6  code  quality  is  poor  and  the  appli¬ 
cation  isn’t  critical  to  the  business,  an  off-the-shelf  pack¬ 
age  might  be  a  good  option  if  it  provides  at  least  half  of  the 
needed  functionality.  Outsourcing  is  another  option. 

-Carol  Sliwa 


Helpful  Links 

■  Microsoft  Visual  Basic 
Developer  Center 

©  QuickLlnk  a6010 

■  Visual  Basic  6.0 
Resource  Center 

©  QuickLink  a8G20 

■  “Visual  Basic  Application 
Migration  Strategy” 
white  paper 

©  QuickLink  a6030 
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Applications 

Maintaining  some  300  homegrown  applica¬ 
tions  isn’t  easy,  but  consumer  electronics 
retailer  Crutchfield  Corp.  says  that  doing  so 
makes  it  more  responsive  to  customers’ 

needs.  By  Robert  L  Mitchell 


Box  application  performance  monitor¬ 
ing  software,  which  automated  testing 
and  helped  identify  and  trace  prob¬ 
lems.  Using  Black  Box,  the  project 
went  forward.  It  required  a  month  for 
testing,  followed  by  a  week  to  upgrade 
250  PCs  in  the  contact  center,  where 
the  spyware  problem  was  most  acute. 

“The  bulk  of  our  problems  —  be¬ 
tween  80%  to  90%  —  were  the  result 
of  permissions  changes  on  specific 
portions  of  the  file  system  or  registry,” 
says  Bill  Hamilton,  client  support  team 
leader.  Finding  a  specific  key  that  has 
had  its  permissions  changed  was  like 
looking  for  a  needle  in  a  haystack. 
“AppSight  was  like  having  a  big  red  ar¬ 
row  pointing  to  the  needle,”  he  says. 

While  fixing  all  of  the  company’s  Vi¬ 
sual  Basic  6  programs  to  accommodate 
SP2  required  a  bit  of  work,  Weiskircher 
says  being  able  to  work  around  prob¬ 
lems  with  third-party  software  beats 
waiting  for  patches.  “We  can  just  adjust 
our  code  around  that  product,”  he  says. 


Imagine  if  you  wrote  and  main¬ 
tained  every  major  application  in 
your  enterprise.  The  good  news 
is  that  you  wouldn’t  have  to  wait 
for  vendors  to  fix  integration 
problems  before  making  applica¬ 
tion  upgrades.  The  bad  news  is 
that  when  application  conflicts 
arose,  fixing  them  would  be  entirely 
your  problem.  And  as  your  infrastruc¬ 
ture  changed  from,  say,  client/server  to 
three-tier  to  service-oriented  architec¬ 
ture  (SOA),  you  would  need  to  migrate 
everything  yourself. 

That’s  the  situation  at  Crutchfield 
Corp.,  a  Charlottesville,  Va.-based  cata¬ 
log  and  online  merchant  of  consumer 
electronics.  The  company  has  a  staff  of 
500  people,  with  some  550  desktops 
and  100  servers  to  manage.  And  the  IT 
organization  wrote  85%  of  the  code 
that  runs  inside  the  company,  accord¬ 
ing  to  CIO  Steve  Weiskircher.  His  staff 
maintains  300  applications  that  run  on 
Windows  servers.  Those  applications 
include  the  Web  site,  warehouse  man¬ 
agement,  point-of-sale,  general  ledger 
and  order  entry  systems.  The  order  en¬ 
try  system  alone  has  more  than  1  mil¬ 
lion  lines  of  code. 

With  that  many  applications  to  man¬ 
age,  it’s  not  surprising  that  Crutchfield 
has  a  relatively  large  IT  staff  for  its 
size,  including  18  full-time  developers. 
But  why  take  on  the  burden?  “It’s  due 
to  our  entrepreneurial  nature,”  Weis¬ 
kircher  says.  “We  know  our  business 
and  data  better  than  anyone  else.”  By 
making  the  investment,  he  says,  Crutch¬ 
field  is  able  to  achieve  a  level  of  busi¬ 
ness  responsiveness  that  enterprise  ap¬ 
plication  software  vendors  routinely 


promise  but  never  seem  to  deliver. 

The  advantage  of  owning  the  code  is 
that  the  IT  staff  can  make  changes 
quickly  instead  of  waiting  on  vendors’ 
revision  schedules  and  priorities. 

“That  does  come  at  a  cost  when  you 
have  things  like  Windows  XP  SP2  or 
any  other  change  to  the  infrastruc¬ 
ture,”  Weiskircher  says.  Those  types  of 
changes  cause  the  same  problems  for 
Crutchfield’s  homegrown  applications 
that  they  cause  for  commercial  appli¬ 
cations. 

PROPAGATING  CHANGE 

There  are  times  when  Crutchfield 
does  look  for  outside  help.  A  decision 
to  move  to  Windows  XP  Service  Pack 
2,  which  was  precipitated  by  the  spy- 
ware  battle  that  call  center  staffers 
faced  while  working  on  the 
Web,  was  delayed  when 
Crutchfield  discovered 
that  its  own  applications 
were  accessing  areas  of  the 
registry  and  file  system 
that  SP2  was  trying  to 
close.  With  only  four  peo¬ 
ple  available  to  manage  the 
desktops,  Weiskircher  esti¬ 
mates  that  it  would  have 
taken  six  months  to  identi¬ 
fy  all  of  the  application 
conflicts  and  track  down 
the  problems.  “We  didn’t 
know  everything  that  had 
changed  since  SP2,  so  we 
would  have  had  to  look  for 
lots  of  variables,”  he  says. 

Weiskircher  eventually 
ran  across  Identify  Soft¬ 
ware  Ltd.’s  AppSight  Black 


EYEING  AN  ERP  SYSTEM 

Crutchfield  has  weighed  the  pros  and 
cons  of  going  with  a  complete  ERP  sys¬ 
tem  from  a  vendor  such  as  SAP  AG, 
but  it  rejected  the  idea.  The  problem 
with  that  scenario,  Weiskircher  says,  is 
that  you  “buy  a  product  off  the  shelf 
and  then  adjust  your  business  process¬ 
es  to  it.”  That’s  fine  for  some  well- 
defined  applications  such  as  human 
resources  or  accounting.  “But  for  what 
is  unique  in  your  organization,  you  can 
probably  do  better  than  someone  who 
doesn’t  know  your  space  or  environ¬ 
ment  or  business  rules,”  he  says. 

Stuart  Selip,  an  analyst  at  Burton 
Group  in  Midvale,  Utah,  isn’t  sure  so 
much  of  the  application  infrastructure 
needs  to  be  homegrown.  “Essentially, 
they’re  in  the  software 
business,”  he  says.  Such  in¬ 
vestments  are  worthwhile 
only  if  an  organization  has 
a  unique  need  that  can’t  be 
satisfied  by  enterprise  soft¬ 
ware  offerings  and  if  the 
company  derives  signifi¬ 
cant  competitive  advantage 
from  custom  applications, 
he  says.  But  Weiskircher 
says  Crutchfield’s  systems 
enable  a  close  relationship 
with  customers  that  its 
competitors  can’t  match. 

Crutchfield  is  looking 
into  revamping  its  applica¬ 
tion  infrastructure  and  is 
comparing  each  applica¬ 
tion  against  off-the-shelf  al¬ 
ternatives.  Weiskircher  will 
OK  a  move  to  an  off-the- 


shelf  product  only  if  it  fits  cleanly  into 
the  organization  and  can  do  80%  of 
what  the  homegrown  application  does 
without  a  lot  of  customization.  The  ap¬ 
plications  must  lower  staff  overhead 
for  maintenance  and  management, 
freeing  up  resources  to  focus  on  more 
business-critical  systems. 

Crutchfield  will  be  doing  a  lot  of  de¬ 
velopment  over  the  next  few  years:  Its 
application  code  is  currently  a  mix  of 
Visual  Basic  6,  VB.Net,  C,  C++,  C#, 

ASP  and  ASPX.  Its  system  architec¬ 
tures  are  a  mix  of  client/server  in  the 
call  center,  three-tier  in  the  online  re¬ 
tail  store  and  an  n-tier  Web  architec¬ 
ture.  The  next  step  will  be  toward  an 
SOA,  Weiskircher  says. 

The  question  is  how  to  get  there 
with  those  300  applications  over  the 
next  three  years.  The  company  wants 
to  migrate  to  the  .Net  platform,  which 


Crutchfield  Corp. 

$220  million 

500,  including  250 
in  the  call  center 

300  custom- 

developed  applications  residing  on 
100  Windows  servers  run  every 
major  operation  from  order  entry 
to  the  general  ledger. 

85% 
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Recently  completed  upgrade 
to  Windows  XP  SP2;  reviewing  applica¬ 
tions  against  off-  the-shelf 
alternatives;  starting  three-year 
migration  to  an  SOA. 


means  moving  some  code  from  the 
procedural  VB6  to  the  more  object-ori¬ 
ented  VB.Net.  That’s  a  lot  of  work. 

“The  goal  is  not  to  replace  the  VB6 
code.  That  is  a  byproduct  of  the  proj¬ 
ect.  It  is  really  a  move  toward  an  SOA 
and  providing  more  flexibility  to  the 
business,”  Weiskircher  says. 

Crutchfield  has  also  benefited  from 
the  flexibility  of  Web  services  and  the 
.Net  platform.  Weiskircher  discovered 
that  he  could  consolidate  business 
processes  from  the  company’s  three 
retail  channels  into  one  Web  service. 
“We  can  make  incremental  changes  to 
reach  the  desired  architecture  over 
time  without  wholesale  rewriting  of 
applications,”  he  says.  0  54930 
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Now  you  can  quickly  deploy  a 
standard-  or  high-density  site  of  any  size 
with  scalable,  top-tier  availability. 


Part 

Number 

Usable 

IT  Racks 

Average 
kW  per  Rack 

Price 
to  buy 

Price  to  lease 
(36  installments) 

ISXCR1SY16K16P5 

1 

up  to  5kW 

S1 4,999' 

$499~ 

ISXT240MD6R 

6 

up  to  5kW 

$1 49,999' 

$4,999” 

ISXT240MD11R 

11 

up  to  5kW 

$249,999‘ 

s7,999~ 

ISXT280MD40R 

40 

up  to  5kW 

s699,999‘ 

$21,999” 

ISXT2800MD100R 

100 

up  to  5kW 

$1 ,649,999' 

$50,999” 

High  Donsity  Configuration  (shown  above/ 

ISXT280HD8R 

8 

up  to  lOkW 

$399,999* 

$1 2,999” 

All  multi-rack  configurations  feature: 

V  N+ 1  power  and  cooling 

J  Secure,  self-contained  environment 
J  Peak  capacity  of  20kW per  rack 

V  Enhanced  service  package 

J  Integrated  management  software 


High  density  upgrades  start  at  $1 0,999 
On-site  power  generation  options  start  at  $29,999 
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BLADE 

READY 


APC  solutions  that  carry 
the  "Blade-Heady"  Logo 
are  designed  to  handle  the 
demanding  network-critical 
physical  infrastructure 
requirements  of  high-density 
blade  server  applications. 


Chamber  Doors 

Access  to  hot  aisle, 
locks  for  security 


Order  your  solution  today.  Call  888-289-APCC  x3412. 
l/isit  today  and  receive  FREE  APC  White  Papers 

/isit  us  online  and  download  APC  White  Papers, 

Don't  see  the  configuration  you  need? 

Try  APC's  online  InfraStruXure  BuildOut  Tool  today  and  build  your  own  solution. 

Go  to  http://promo.apc.com  and  enter  key  code  c189x  Call  888-289-APCC  x3412 


Pbnicnl  In' 


Infrastructure' 

DATA  CENTERS  ON  DEMAND 

Highly  available  and  manageable, 
quick-to-install,  scalable  architecture 
that  easily  supports  both  standard- 
and  high-density  applications. 

-  Up  to  20kW  a  rack  for  any 
blade  server  application 

-  Unlimited  racks 

-  Ships  in  5  days  * 

-  Installs  in  1  day * 

-  Optional  on-site  power 
generation 

-  Raised  floor  not  required 

-  Vendor  neutral  guaranteed 
compatibility 


„*** 


InfraStruXure ~  can  be  purchased  as  a 
modular,  or  mobile  system 


Legendary  Reliability® 


InfraStruXure'"  BuildOut  Tool 


*  Prices  bo  not  include  IT  equipment  and  are  subject  to  change.  **  Indicative  rates  are  subject  to  market  conditions. 


***  Install  and  delivery  times  may  vary. 
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IBM  ©Server®  xSeries 


PAY  MORE  ATTENTION  TO  SERVERS 
BEFORE  YOU  BUY  THEM. 

SO  YOU  CAN  PAY  LESS  ATTENTION 


Affordable,  reliable,  easy  to  manage:  eServer®  xSeries®  with  Intel®  Xeon™  Processors 


IBM  eServer  xSeries  236  Express 

Designed  to  improve 
performance  and  availability, 
with  a  range  of  features 
such  as  redundant  hot-swap 
power  and  cooling. 

System  features 

Up  to  two  Intel  Xeon 
Processors  3.60GHz 
Two-way  tower  with 
rack  capability 
Up  to  9  hot-swappable 
SCSI  hard  disk  drives 
IBM  Director 
Limited  warranty:  up  to  3 
years  on-site3 

From  $2,989* 

IBM  Financing  Advantage 

Only  $82  per  month4 


IBM  eServer  xSeries  346  Express 

Help  maximize  performance 
and  improve  availability  in  a 
rack  dense  environment  with 
Xtended  Design  Architecture.™ 
Includes  features  like  Calibrated 
Vectored  Cooling,  an  IBM 
innovation  that  helps  to  keep 
your  system  cool  and  improve 
uptime. 

System  features 

Up  to  two  Intel  Xeon 
Processors  3.60GHz 
Two-way  2U  rack  server 
Up  to  16GB  DDR2  memory 
using  8  DIMM  slots 
Calibrated  Vectored  Cooling 
IBM  Director 

Limited  warranty:  up  to  3 
years  on-site3 

From  $3,999* 

IBM  Financing  Advantage 

Only  $109  per  month4 


IBM  eServer  xSeries  366  Express 

With  the  power  of  3rd  generation 
Enterprise  X-Architecture,T“  it  sets 
a  new  standard  for  4-socket, 
64-bit  servers.  Delivers  increased 
performance,  systems  manage¬ 
ability,  and  simultaneous  support 
for  32  and  64-bit  apps. 

System  features 

Up  to  four  64-bit  Intel  Xeon 
Processors  MP  3.66GHz 
64GB  DDR  memory 
2GB  memory  expandable 
to  64GB 

Six  64-bit  Active  PCI-X  2.0 
IBM  Director 

Calibrated  Vectored  Cooling 
Limited  warranty:  up  to  3  years 
on-site3 

From  $13,779* 

IBM  Financing  Advantage 

Only  $379  per  month4 
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Flexible  and  easy  to  use 


IBM  eServer  BladeCenter  HS20  Express 

Designed  to  support  the  Intel 
Xeon  Processor  and  packed 
with  high-availability  features, 
the  eServer  BladeCenter 
HS20  with  industry-leading 
modular  design  delivers  density 
without  sacrificing  processor 
performance. 

System  features 

Up  to  two  Intel  Xeon 
Processors  3.60GHz 
Up  to  14  blades  per  chassis 
Supports  both  32 

and  64-bit  applications 
IBM  Director 
Limited  warranty:  up  to  3 
years  on-site3 

From  $2,589* 

IBM  Financing  Advantage 

Only  $71  per  month4 


IBM  Iota  I  Storage5*  Simplify  storage  management  to  improve  productivity 


IBM  TotalStorage  DS300  Express 

Entry-level,  cost-effective  SCSI  storage  systems 
designed  to  deliver  advanced  functionality  at  a 
breakthrough  price.  Provides  an  exceptional 
solution  for  work  group  storage  applications,  such 
as  e-mail,  file,  print,  database  and  Intel  Xeon 
Processor-based  servers. 


System  features 

3U  rack-mount  entry  level 
Support  for  up  to  14 

Ultra320  SCSI  disk  drives 
Starts  at  584GB  /  Scales  to  4.2TB 

From  $5,355* 


Simultaneous  support  of 
heterogeneous  operating 
system  environments  for 
xSeries  and  BladeCenter 

Limited  warranty:  1  year 
on-site3 

IBM  Financing  Advantage 

Only  $147  per  month1 


‘All  prices  stated  are  IBM's  estimated  retail  selling  prices  as  of  May  3,  2005.  Prices  may  vary  according  to  configuration.  Resellers  set  their  own  prices,  so  reseller  prices  to  end  users  may 
vary.  Products  are  subject  to  availability.  This  document  was  developed  for  offerings  in  the  United  States.  IBM  may  not  offer  the  products,  features,  or  services  discussed  in  this  document  in 
other  countries.  IBM  Director  is  not  available  on  TotalStorage  systems.  ?IBM  Director  must  be  installed,  telephone  support  may  be  subject  to  additional  charges.  For  on-site  labor  IBM  will 
attempt  to  diagnose  and  resolve  the  problem  remotely  before  sending  a  technician.  ‘IBM  Global  Financing  terms  and  conditions  and  other  restrictions  may  apply.  Monthly  payment  provided 


TO  THEM  AFTER. 


With  IBM®  Express  Servers  and  Storage™ 
designed  for  mid-sized  businesses,  help  is  here. 

You’ve  already  got  a  zillion  things  that  require  your 
attention  -  you  shouldn’t  have  to  worry  about  your  systems. 
That’s  why  IBM  Express  products  offer  enhanced  reliability, 
which  helps  them  do  their  job  so  you  can  focus  on  yours. 

Take  IBM  Director,  for  example.1  It  proactively  notifies  you 
of  a  potential  problem -up  to  48  hours  in  advance.  Or  our 
Calibrated  Vectored  Cooling  feature  available  on  select 
xSeries  systems.  It  cools  your  system  more  efficiently. 
This  means  more  features  can  be  packed  into  a  smaller 
server.  Giving  you  more  functionality  and  greater  flexibility. 

It’s  just  an  example  of  our  self-managing  features  that  help 
you  take  back  control  of  your  IT.  Which  can  help  lower 
your  maintenance  costs,  too.  Because  with  IBM  Express 
Servers  and  Storage,  innovation  comes  standard.  It’s  not 
optional.  Plain  and  simple,  it’s  built  in.2 

There’s  also  one  more  great  feature-your  IBM  Business 
Partner.  Which  means  you  can  have  a  one-to-one  chat 
with  someone  who  understands  your  industry  and  your 
business -and  who’s  located  in  your  neck  of  the  woods. 
And  for  mid-sized  businesses,  that’s  really  big  help  in  a 
really  big  way. 
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1-800-1 BM-7777 
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SIZE  OF  BUSINESS 


HELP  FOR  ANY  SIZE  PROBLEM 


® 


IBM  TotalStorage  DS400  Express 

With  advanced  functionality,  the  DS400  provides 
an  exceptional  solution  for  work  group  storage 
applications.  It  supports  Intel  Xeon  Processor- 
based  servers  and  offers  Fibre  Channel  drives 
designed  for  high  performance,  and  hot-swap 
Ultra320  SCSI  drives  designed  for  high  reliability. 


System  features 

2GB  Fibre  Channel  storage 
systems  area  network  (SAN) 

3U  rack-mount  entry  level 
Starts  at  584GB  /  Scales  to  5.8TB 

From  $8,495* 


Simultaneous  support  of 
heterogeneous  operating 
system  environments  for 
xSeries  and  BladeCenter 
Limited  warranty:  1  year  on-site3 


IBM  Financing  Advantage 

Only  $234  per  month'1 


,  „eoe  nnhl  anH  nwv  vflrv  based  on  customer  credit  and  other  factors.  Rates  and  offerings  are  subject  to  change,  extension,  or  withdrawal  without  notice  IBM,  eServer. 

is  for  planning  purposes  only  an»  X-Architecture  and  Xtended  Design  Architecture  are  trademarks  or  registered  trademarks  of  International 

BladeCenter,  xSeries,  Totalotorage  IBM  fc  xpiess  ^^[L^^torage;  ^  eiP,  „  e  X  Acnrtect  .  and  Intel  Xeon  are  trademarks  or  registered  trademarks  of  Intel  Corporation  or 

Sid  serlicenames  may  be  tridemarks  or  service  marks  of  others,  O  2005  IBM  Corporation.  A„  rights  reserved. 
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Business  Process  Execution  Language 

is  an  XML-based  language  that’s 
designed  to  run  a  series  of  Web- 
based  transactions  and/or  charac¬ 
terize  interfaces  that  are  needed  to 
complete  Web-based  transactions. 


BY  JAN  MATLIS 

—  or  its  advocates,  Busi¬ 
ness  Process  Execution 
Language  promises  to 
be  the  capstone  in  the 
Web  services  standards  stack 
that  makes  Web-based  com¬ 
merce  work.  It  was  designed 
to  integrate  a  variety  of  appli¬ 
cations  that  are  run  to  achieve 
a  particular  business  objective 

—  and  to  do  it  in  a  way  that’s 
platform-  and  code-indepen- 
dent,  not  to  mention  one  that’s 
scalable  and  flexible. 

It  would  be  possible  to  ham¬ 
mer  out  Java  code  or  a  set  of 
Unix  scripts  that  could  manage 
a  series  of  processes 

—  such  as  the  steps 
taken  by  an  insurance 
broker  running  a  se¬ 
ries  of  Web-based  ap¬ 
plications  to  match 
the  needs  of  a  customer  —  but 
the  task  would  be  laborious, 
and  the  finished  code  would 
likely  be  cumbersome.  Writ¬ 
ing  a  BPEL  application,  on  the 
other  hand,  provides  a  layer  of 
abstraction  through  which  all 
the  steps  can  be  connected 
and  managed. 

Sitting  in  front  of  a  BPEL  de¬ 
signer  graphical  user  interface, 
a  business  manager  such  as 
our  insurance  broker  could 
define  a  business  process  in 
BPEL  that  would  be  indepen¬ 
dent  of  the  underlying  appli¬ 
cations.  If  those  applications 
were  to  change,  the  insurance 
broker’s  arrangement  of  them 
in  the  BPEL  designer  GUI 
could  stay  the  same.  Or  if  the 


insurance  broker’s  business 
plan  changed,  he  could  re¬ 
arrange  the  processes,  as  well 
as  add  new  ones  or  subtract 
others,  within  the  GUI. 

To  run  BPEL  code  that  has 
been  generated,  either  through 
a  GUI  or  by  an  intrepid  XML 
programmer,  the  code  is 
parsed  by  a  BPEL  engine, 
which  does  the  same  kind  of 
parsing  job  as  other  XML  in¬ 
terpreters.  Each  process  that’s 
run  is  characterized  by  a  Web 
Services  Description  Lan¬ 
guage  (WSDL)  document,  and 
its  messages  are  transmitted 
across  the  Web  by  the  Simple 
Object  Access  Protocol 
(SOAP).  Processes  that 
look  up  available  Web 
services  can  use  the 
Universal  Description, 
Discovery  and  Integra¬ 
tion  (UDDI)  directory. 

In  order  to  define  business 
processes,  BPEL  has  been  en¬ 
dowed  with  a  variety  of  XML 
constructs,  including  “part¬ 
ners,”  which  are  definitions  of 
the  actors  in  a  business  trans¬ 
action;  “containers,”  which  are 
definitions  of  the  messages 
that  need  to  be  transmitted; 
“operations,”  which  are  defini¬ 
tions  of  the  type  of  Web  ser¬ 
vices  that  are  required;  and 
“port  types,”  which  are  defini¬ 
tions  of  the  kinds  of  Web  ser¬ 
vices  connections  that  are  re¬ 
quired  for  operations. 

BPEL’s  capacity  goes  be¬ 
yond  the  range  of  traditional, 
definitional  XML  types.  By 
defining  processes,  it  blurs  the 


distinction  between  XML  —  a 
definition  language  —  and  ex¬ 
ecutable  languages  like  Java 
and  Unix  shell  scripts;  hence 
the  “execution”  in  its  name. 

To  define  how  processes 
should  be  executed,  BPEL  has 
XML  definitions  or  com¬ 
mands  that  specify  the  order 
of  operations,  the  looping  of 
operations,  and  synchronous 
and  asynchronous  require¬ 
ments  for  operations.  (Syn¬ 
chronous  operations  block  re¬ 
questers  until  a  request  is  ei¬ 
ther  fulfilled  or  denied.  Asyn¬ 
chronous  operations  allow  re¬ 
questers  to  continue  without 
waiting  for  a  response.)  BPEL 
also  has  commands  to  take 
care  of  fault  conditions  and 
commands  to  undo  or  reverse 
operations. 

An  insurance-broker  BPEL 
program,  for  example,  might 
request  financial  information 
from  a  customer  first,  loop 
through  insurance  company 
offerings  that  it  discovers 
from  a  UDDI  search  (some 
of  which  may  be  time-based 
offers)  and  finally  present  a 
package  to  the  customer.  If 
an  error  occurs  or  if  the  cus¬ 
tomer  rejects  the  offers,  even 
after  tentatively  accepting 
one,  the  BPEL  program  will 
make  the  proper  adjustments. 

Several  major  companies 
have  been  involved  in  defining 
BPEL,  and  many  of  them  par¬ 
ticipated  in  previous  efforts  to 
create  standards  for  business 
process  execution  for  Web 
services.  They  include  Adobe 
Systems  Inc.,  Avaya  Inc.,  BEA 
Systems  Inc.,  Booz  Allen 


Standards 
Stack  for  Web 
Transactions 


Hamilton  Inc.,  Electronic 
Data  Systems  Corp.,  Hewlett- 
Packard  Co.,  NEC  Corp.,  Nov¬ 
ell  Inc.,  Oracle  Corp.,  Panacea 
Corp.,  SAP  AG  and  SeeBeyond 
Technology  Corp.  However, 
IBM  and  Microsoft  Corp.  have 
had  the  most  impact  on  defin¬ 
ing  how  execution  works  in 
BPEL.  IBM’s  Web  Services 
Flow  Language,  which  uses  a 
directed  graph  approach,  and 
Microsoft’s  Xiang,  which  uses 
a  block-structured  approach, 
were  brought  together  in  Au¬ 
gust  2002  under  the  aegis  of 
the  Organization  for  the  Ad¬ 
vancement  of  Structured  In¬ 
formation  Standards  to  create 
the  first  draft  of  the  BPEL 
standard. 

Directed  graphs  specify  the 
choices  that  must  be  made  to 
get  from  one  transactional 
state  to  another.  For  example, 
customer  financial  informa¬ 
tion  must  be  received  before 
insurance  quotes  are  solicited. 
Block-structured  languages  of¬ 


fer  the  kind  of  programming 
flexibility  familiar  to  Java,  C 
and  C++  programmers. 

The  consensus  among  ana¬ 
lysts  appears  to  be  that  BPEL 
will  “orchestrate”  business 
processes,  meaning  that  cen¬ 
tralized  control  of  Web  ser¬ 
vices  will  reside  in  a  BPEL  en¬ 
gine.  However,  the  protocol 
seems  to  leave  open  the  possi¬ 
bility  for  “choreographing” 
Web  services  at  a  future  date. 
Choreographed  Web  services 
interact  without  being  directed 
by  a  central,  controlling  pro¬ 
gram.  The  ability  in  BPEL  to 
publish  the  execution  require¬ 
ments  of  a  Web  service  would 
seem  to  be  what’s  needed  for 
the  more  decentralized  vision 
of  choreography. 

Someday,  instead  of  harried 
office  administrators  talking 
into  three  phones  at  once,  or 
stock  brokers  monitoring  banks 
of  terminals  while  bidding  in 
the  seeming  anarchy  of  the  ex¬ 
change  floor,  or  even  lonely 
consumers  trying  to  synchro¬ 
nize  airline,  hotel  and  car 
reservations,  BPEL  engines 
may  be  doing  it  all  with  little 
more  than  the  occasional 
mouse  click  from  the  humans 
involved.  O  54724 


Matlis  is  a  freelance  writer 
in  Newton,  Mass.  He  can  be 
reached  atjmtgpcmcm@ 
aol.com. 
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Environmental  Issues 


■  BPEL  orchestration  servers  provide  a  runtime 
environment  for  executing  BPEL  business  processes. 

■  BPEL  servers  work  in  both  J2EE  or  .Net 
application  server  environments,  where  they  can 
make  use  of  the  services  provided  by  application  servers, 
such  as  security,  transactions,  scalability  and  integration 
with  databases,  as  well  components  such  as  Enterprise 
JavaBeans  and  messaging  systems  such  as  Java 
Message  Service. 

■  BPEL  orchestration  servers  for  J2EE: 

•  Oracle  BPEL  Process  Manager 

•  IBM  WebSphere  Business  Integration  Server 
Foundation 


•  IBM  alphaWorks  BPWS4J 

•  OpenStorm  Software  Inc.'s  Service  Orchestrator 

•  Vergil  Technology  Ltd.'s  VCAB  Server 

•  Active  Endpoints  Inc.'s  ActiveWebflow  Server 

•  ActiveBPEL  Engine,  an  open-source  technology 
released  under  the  GPL  by  ActiveBPEL  LLC 

•  Bexee  BPEL  Execution  Engine,  an  open-source, 
J2EE-based  BPEL  engine 

•  Cape  Clear  Software  Inc.’s  Orchestrator,  an 
enterprise  service  bus  containing  an  enterprise 
BPEL  engine 

•  FiveSight  Technologies  Inc.’s  Process  execution 
Engine 

•  SeeBeyond’s  elnsight  Business  Process  Manager 

■  BPEL  orchestration  servers  based  on  .Net: 

•  Microsoft  BizTalk  2004 

•  OpenStorm  Service  Orchestrator 
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Netline  Releases 
Outlook  Connector 

■  Netline  Internet  Service  GmbH 
is  offering  a  connector  that’s  de¬ 
signed  to  let  users  of  its  Linux- 
based  Open-Xchange  Server  5.0 
run  Microsoft  Outlook  clients  for 
easy  collaboration  with  existing 
Outlook  users.  The  new  OXIook 
connector  can  be  installed  on  a 
Windows  2000  or  XP  client  and 
allows  Outlook  2000,  XP  and 
2003  to  be  used,  according  to 
the  Olpe,  Germany-based  vendor. 
Twenty-five  OXIook  connectors 
are  included  with  the  OX  Ad¬ 
vanced  Server  Edition,  which 
sells  for  S850;  additional  seats 
cost  $25  each. 


Solaris  Source 
Code  Released 

■  Sun  Microsystems  Inc.  last 
week  released  most  of  the  Solaris 
operating  system  source  code  to 
its  open-source  community, 
Opensolaris.org.  The  release  in¬ 
cludes  the  code  for  the  core  oper¬ 
ating  systems,  system  libraries, 
networking,  commands  and  ma¬ 
jor  upgraded  features  in  Solaris 
10.  The  release  of  the  code  fulfills 
a  pledge  Sun  made  last  year  to 
make  an  open-source  version 
of  Solaris  available. 


Segue  Upgrades 
Testing  Manager 

■  Segue  Software  Inc.  in  Lexing¬ 
ton,  Mass.,  this  week  is  rolling 
out  SilkCentral  Test  Manager  8.0, 
the  new  release  of  its  application 
testing  management  software. 
SilkCentral  is  designed  to  define, 
measure,  manage  and  improve 
application  quality  from  require¬ 
ments  through  predeployment, 
according  to  the  company.  Ver¬ 
sion  8.0  includes  support  for 
requirements  management,  test 
planning,  test  execution  and  is¬ 
sues  management.  The  reporting 
features  provide  a  dashboard 
view  into  overall  project  quality, 
with  the  ability  to  drill  down  into 
additional  levels  of  detail,  says 
Segue.  Pricing  starts  at  $4,500 
for  one  base  license. 
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Selling  Out 
On  Standards 


Thirty-two  years  ago,  IEEE  partici¬ 
pants  hammered  out  one  of  the  most  suc¬ 
cessful  standards  ever  developed.  Ethernet 
succeeded  in  part  because  the  big  players 
involved  at  the  time,  including  Xerox,  Intel 
and  Digital  Equipment,  donated  intellectual  property 


(IP)  to  the  specification. 

Those  vendors  weren’t  moti¬ 
vated  by  altruism  but  by  en¬ 
lightened  self-interest:  Each 
realized  that  a  common 
standard  would  expand  the 
market  and  provide  more 
opportunities  to  sell  Ether¬ 
net-based  products. 

Today,  many  vendors  view 
the  process  that  created 
Ethernet  as  a  quaint  relic 
of  the  past.  The  rules  have 
changed,  middlemen  have 
been  added,  and  it’s  users 
who  will  pay  the  price. 

Now,  rather  than  being  content  to  re¬ 
coup  IP  development  costs  indirectly  by 
selling  products  based  on  new  standards, 
vendors  increasingly  expect  to  be  paid 
for  the  IP  that  they  contribute.  And  a 
class  of  companies  has  emerged  that 
doesn’t  produce  products  at  all.  Their 
business  model  is  to  develop  IP,  patent  it 
and  license  it  to  others  who  then  build 
the  IT  products  and  services  you  buy. 
The  IP  vendors  participate  vigorously  in 
the  standards  process  in  order  to  ensure 
that  the  final  specification  includes  IP 
covered  by  their  patents.  In  this  way, 
any  manufacturer  that  builds  a  product 
based  on  that  standard  will  need  to  buy 
a  license  from  the  vendors. 

Standards  organizations  have  had  to 
relax  the  rules  to  accommodate  pressure 
from  vendors.  At  the  IEEE,  dealing  with 
IP  issues  is  now  its  biggest  challenge. 
The  World  Wide  Web  Consortium, 
which  insists  on  a  royalty-free  IP  policy, 
has  seen  standards  initiatives  move  to 
more  flexible  consortia,  such  as  OASIS. 

The  concept  of  the  royalty-free  speci¬ 
fication  is  being  supplanted  by  “reason¬ 
able  and  nondiscriminatory”  licensing 


terms,  also  known  as  RAND. 
In  some  cases,  there  are  so 
many  IP  owners  to  pay  off 
that  building  a  product  to 
conform  with  a  standard  has 
become  onerous.  To  facili¬ 
tate  that  process,  a  layer  of 
infrastructure  has  emerged: 
the  licensing  agency,  whose 
sole  purpose  is  to  act  as  a 
consolidator  —  a  bill-pay¬ 
ment  service  for  the  IP  own¬ 
ers  behind  a  given  standard. 

The  most  obvious  exam¬ 
ple  of  this  development  has 
taken  place  in  the  digital 
rights  management  (DRM)  arena.  Here, 
the  specification  for  the  ISO  standard 
MPEG  REL,  a  rights  expression  language 
used  in  DRM  implementations,  is  de¬ 
rived  from  IP  owned  by  ContentGuard, 
a  spin-off  from  Xerox.  What’s  unusual  in 
this  case  is  that  the  IP  reflected  in  the 
standard  is  wholly  owned  by  a  single 
vendor,  says  Trent  Henry,  an  analyst  at 
Burton  Group. 

The  Open  Mobile  Alliance  vendor 
consortium  has  backed  a  different  lan¬ 
guage,  called  Open  Digital  Rights  Lan¬ 
guage,  as  part  of  its  OMA  1.0  DRM  speci¬ 
fication.  But  the  amount  of  IP  in  OMA 
1.0  that  must  be  licensed  from  Content- 
Guard,  InterTrust  Technologies  and  oth¬ 
ers  has  weighed  down  the  effort.  When 
MPEG  LA,  an  independent  licensing 
agency  serving  the  IP  vendors,  an¬ 
nounced  plans  this  spring  to  charge  $1 
per  cell  phone  to  license  those  patents, 
the  wireless  industry  balked.  Negotia¬ 
tions  are  ongoing. 

Bill  Rosenblatt,  president  of  Giant- 
Steps  Media  Technologies  and  editor  of 
the  “DRM  Watch”  newsletter,  thinks  the 
I  media  industry  brought  this  situation  on 
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itself.  Initially,  both  ContentGuard  and 
InterTrust  offered  products  in  the  DRM 
market.  “The  media  companies  that 
would  most  directly  benefit  from  the 
technologies  did  not  want  to  pay  for  it,” 
Rosenblatt  says.  So  both  companies 
abandoned  their  products  to  focus  on  IP. 

The  DRM  battle  also  involves  political 
maneuvering,  with  Microsoft,  Time 
Warner  and  Thomson  being  key  share¬ 
holders  in  ContentGuard,  and  Sony  Cor¬ 
poration  of  America  and  Philips  Elec¬ 
tronics  controlling  InterTrust.  But  this 
IP  soap  opera  doesn’t  stop  there. 

ContentGuard,  which  claims  its 
patents  extend  well  beyond  MPEG  REL, 
is  trying  to  extract  licensing  fees  from 
every  major  vendor  of  DRM  technology. 
“We  think  they  are  likely  to  infringe  on 
one  or  more  of  the  patents  in  our  port¬ 
folio  . . .  because  the  patents  are  very 
broad,”  says  interim  co-CEO  Bruce 
Gitlin. 

Though  DRM  is  largely  a  consumer- 
focused  technology,  the  consumer  sector 
often  drives  technologies  that  are  used 
in  business.  In  this  case,  DRM  is  the  un¬ 
derlying  technology  in  the  nascent  mar¬ 
ket  for  enterprise  rights  management 
software,  which  is  used  to  secure  and  en¬ 
force  access  rights  to  corporate  docu¬ 
ments  and  e-mail. 

Asking  vendors  to  license  IP  in  order 
to  build  industry-standard  products  adds 
to  the  cost  of  those  products  while  mak¬ 
ing  standards  more  difficult  for  manu¬ 
facturers  to  follow.  Ultimately,  the  prod¬ 
ucts  will  be  more  expensive  because  IP 
patents,  once  required  by  standard,  no 
longer  face  competition.  IP  is  now  stan¬ 
dards  overhead,  a  fixed  tax  or  surcharge, 
on  each  product  sold. 

So  standards,  it  seems,  aren’t  what 
they  used  to  be.  This  situation  isn’t  likely 
to  change  unless  users  refuse  to  pay  for 
the  resulting  products  —  or  corporate  IT 
pushes  back  by  increasing  its  level  of 
participation  in  standards  organizations. 
©  54994 
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HOW  MANY  PEOPLE  DOES 
TO  SUPPORT  A  SINGLE 

(THAT’S  TOO  MANY.) 


With  IBM®  Express  Servers  and  Storage™  designed  for 
mid-sized  businesses,  help  is  here. 

Servers  should  support  a  business,  not  the  other  way  around. 
That’s  why  IBM  Express  Servers  have  self-managing  features:  so 
that  our  servers  can  virtually  run  themselves.  What’s  more,  with 
IBM  Express  Servers  and  Storage,  innovation  comes  standard. 
Take  the  OpenPower™  710  Express,  for  instance.  It’s  specially 
tuned  for  Linux®  and  offers  the  reliability  of  POWERS™  technology 
at  a  surprisingly  low  price.1 
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Tuned  for  Linux 

iBM  eServer  OpenPower  710  Express 

System  features 

Increase  computing  power,  availability  and  scalability 
in  a  rack  dense  environment 


And  while  you  can’t  be  in  two  places  at  the  same  time,  you  might 
want  to  look  into  the  innovative  server  feature  that  can.  For  example, 
the  remarkable  Advanced  POWER™  Virtualization  option  -  it  lets 
one  OpenPower  710  Express  act  as  many  virtual  ones. 

On  top  of  that  there’s  IBM  TotalStorage®  products,  which  offer  a  wide 
range  of  disk,  tape,  and  storage  software  solutions  -  so  you  can 
choose  the  right  options  to  meet  the  growing  needs  of  your  company. 

There’s  also  one  more  great  feature  -  your  IBM  Business  Partner. 
Which  means  you  can  talk  to  someone  who  understands  your 
industry  and  your  business  -  and  who’s  located  in  your  neck  of  the 
woods.  And  for  mid-sized  businesses,  that’s  really  big  help  in  a 
really  big  way. 
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Ideal  for  consolidation  of  infrastructure  workloads 
(Web  serving,  file,  print,  security  applications) 

Robust  64-bit  mainframe-inspired  POWER5  systems 

2-way  19”  rack  server 

Up  to  32GB  of  memory 

Optional  Advanced  POWER  Virtualization1 

DB2®  Express  Discover  CD 

Limited  warranty:  up  to  3  years  on-site2 

From  $4,477* 


IBIVI  Financing  Advantage 

Only  $124  per  month  ' 


'All  prices  stated  are  IBM's  estimated  retail  selling  prices  that  were  correct  as  of  May  6,  2005.  Prices  may  vary  according  to  configuration.  Resellers  set  their  own  prices,  so  reseller 
prices  to  end  users  may  vary.  Offers  are  for  business  customers  only  and  are  subject  to  availability.  This  document  was  developed  for  offerings  in  the  United  States.  IBM  may  not  offer 
the  products,  features,  or  services  discussed  in  this  document  in  other  countries.  'The  Linux  operating  system  for  the  OpenPower  710  Express  must  be  purchased  separately.  Price 
does  not  include  virtualization  option.  ^Telephone  support  may  be  subject  to  additional  charges.  For  on-site  labor,  IBM  will  attempt  to  diagnose  and  resolve  the  problem  remotely  before 
sending  a  technician,  3IBM  Global  Financing  terms  and  conditions,  and  other  restrictions  may  apply.  Monthly  payments  provided  are  for  planning  purposes  only  and  may  vary  based 
on  customer  credit  and  other  factors.  Rates  and  offerings  are  subject  to  change,  extension  or  withdrawal  without  notice.  4Customer  Replaceable  Unit  (CRU)  service  is  available’ in  most 


IBM  TotalStorage' 


IT  TAKE 

SYSTEM? 


©  _ __ _ _ _ 

Simplify  storage  management  to  improve  productivity 

IBM  TotalStorage  3580  Express  IBM  TotalStorage  DS4300  Express 


The  3580  Express  helps 
address  your  growing  storage 
requirements  and  the 
problem  of  shrinking  backup 
windows.  It  supports  cost- 
effective  backup,  save  and 
restore,  and  data  archiving. 

System  features 

Built  on  Ultrium®  3  technology 

Read/write  compatible  with 
cartridges  written  by 
Ultrium  2  drives 

Read  compatible  with 
Ultrium  1  cartridges 

Up  to  400GB  cartridge  capacity. 
Up  to  800GB  with 
2  to  1  compression 

Limited  warranty:  3  years’ 

Fromi  $5,850* 

IBM  Financing  Advantage 

Only  $167  per  month3 


With  a  scalable  design,  the 
DS4300  Express  is  designed 
to  provide  a  reliable  and 
affordable  storage  option  to 
help  simplify  your  data 
management  needs. 

System  features 

2GB  Fibre  Channel  SAN-ready 
3U  rack  mount  entry  level 
Scales  to  33.6TB 

Supports  up  to  112  Fibre  Channel 
disk  drives  -  with  optional 
EXP710  expansion  units6 

Heterogeneous  OS  support 

Limited  warranty:  3  years  on-site2 

From  $8,655* 

IBM  Financing  Advantage 

Only  $238  per  month3 


S  THE  WORLD'S  HELP  DESK 


i e<Kff\  more  otoouY  our 
■full  rar\^e  of  X&m  £x| 
product.  And  'find  W\e  _ 

XB-m  Basinet  Partner 
r\e<ur  you  -  who  is  X&M 

trained  to  Know  which _ 

systems  meet"  your  specrfi c 

requirement . 


ibm.com/eserver/helpishere2 

1-800-IBM-7777 


mention  104CE02A 


SIZE  OF  BUSINESS 


HELP  FOR  ANY  SIZE  PROBLEM 


rountripq  SQeneral  nroduct  availability  of  IBM  TotalStorage  DS4300  Express  is  expected  to  be  6/17/05.  6EXP710  expansion  unit  is  not  included  in  the  price.  MB.  GB  and  TB  equal 
1  000  000  1 1 000.000,000  and  1,000,000,000,000  bytes,  respectively,  where  referring  to  storage  capacity.  Actual  storage  capacity  will  vary  based  upon i  many  f factors  and  may  be  ess 
then  slated  Borne  numbers  for  storaqe  capacity  are  given  in  native  mode  followed  by  capacity  using  data  compression  technology.  IBM,  eServer,  POWEFo,  OpenPower,  IBM  Express 
and  Storaae  DB2  POWER  and  IBM  TotalStorage  are  trademarks  or  registered  trademarks  of  International  Business  Machines  Corporation  in  the  United  States  and/or  other 
couni  fes^ Unux ^recfetered trademark  of  Linus  Torvalds  in  the  United  States  and  other  countries.  Linear  Tape-Open.  LTO,  and  Ultrium  are  trademarks  of  Certance,  HP  and  IBM  in 
the  U.S.  and  other  countries.  Other  company,  product,  and  service  names  may  be  trademarks  or  service  marks  of  others.  ©2005  IBM  Corporation,  All  rights  reserved 


Got  Questions  About 
Enterprise  Analytics? 

Computerworld’s  IT  Management  Summit  Has  the  Answers 


Looking  to  better  understand  enterprise 
analytics?  Apply  to  attend  Computerworld’s 
complimentary*  half-day  IT  Management 
Summit:  Beyond  Business  Intelligence. 

Enterprise  analytics  enable  companies  to 
make  timely  fact-based  decisions  using 
critical  information  from  across  the  entire 
organization.  By  fully  leveraging  data, 
technology,  skills  and  processes,  successful 
users  of  enterprise  analytics  go  beyond 
simply  understanding  the  past,  to  predicting 
outcomes  that  improve  overall  corporate 
performance. 

This  summit  will  feature  the  latest  insights 
of  business  intelligence  industry  experts  and 
will  give  you  first-hand  information  on  the 
innovations  and  experiences  of  companies 
successfully  deploying  enterprise  analytics. 

*  Complimentary  registration  is  restricted  to 
qualified  IT  managers  only, 


Apply  for  registration  today 

Contact  Chris  Leger  at  888-299-0155 
or  visit:  www.itmanagementsummit.com 

This  program  will  also  take  place  in: 

Washington,  D.C.  •  July  1 2,  2005 

Chicago,  Illinois  •  July  26,  2005 

New  York,  New  York  •  August  9,  2005 

San  Francisco,  California  •  September  20,  2005 


Beyond  Business  Intelligence: 
Using  Enterprise  Analytics  to  Drive 
Fact-Based  Decisions 
Newton,  Massachusetts  •  June  28,  2005 

Boston  Marriott  Newton  •  2345  Commonwealth  Avenue 


7:45am  to  8:15am  Registration  and  Networking  Breakfast 

8: 1 5am  to  8:25am  Introduction  and  Overview 

Don  Tennant,  Editor  in  Chief,  Computerworld 


8:25am  to  8:55am  Trends  in  Enterprise  Analytics 

Henry  Morris,  Vice  President  and  General  Manager, 
Integration,  Development  and  Application  Strategies,  IDC 

8:55am  to  9:25am  Case  Study:  The  Nature  Conservancy 

Connor  Baker,  Director  of  Business  Information, 

The  Nature  Conservancy 


9:25am  to  1 0: 1 5am  How  Technology  is  Transforming 
Business  Intelligence 

Keith  Collins,  SVP  and  Chief  Technology  Officer,  SAS 
Fran  Burke,  Manager  -  Eastern  Area,  Business  Applications 
Group,  Intel 


Selected 

speakers  include: 


Connor  Baker 
Director  of  Business 
Information,  The  Nature 
Conservancy 


Jody  Porrazzo,  Ph.D. 
Director  of  Economic  Risk 
Strategy,  Niis/APEX  Group 
Holdings 


Henry  Morris 
Vice  President  and  General 
Manager,  Integration, 
Development  and  Application 
Strategies;  IDC 


10:15am  to  10:45am  Refreshment  and  Networking  Break 

1 0:45am  to  11:1 5am  Case  Study:  Niis/APEX  Group  Holdings 

Jody  Porrazzo,  Ph.D.,  Director  of  Economic  Risk  Strategy, 
Niis/APEX  Group  Holdings 

1 1:15am  to  Noon  Panel  Discussion  -  From  Gut  Feel  to  Fact-Based 
Decisions:  Real-Life  Business,  Political  and 
Technology  Lessons  Learned  on  the  Front  Lines  of 
Enterprise  Analytics 

Moderator:  Don  Tennant,  Editor  in  Chief,  Computerworld 
Panelists: 

■  Connor  Baker,  Director  of  Business  Information, 

The  Nature  Conservancy 

•Jody  Porrazzo,  Ph.D.,  Director  of  Economic  Risk  Strategy, 
Niis/APEX  Group  Holdings 

•  Henry  Morris,  Vice  President  and  General  Manager, 

Integration  Development  and  Application  Strategies,  IDC 

•  Keith  Collins,  SVP  and  Chief  Technology  Officer,  SAS 

■  Fran  Burke,  Manager  -  Eastern  Area,  Business  Applications 
Group,  Intel 

Noon  Program  Concludes 


Keith  Collins 

SVP  and  Chief  Technology 

Officer,  SAS 


Fran  Burke 
Manager  -  Eastern  Area, 
Business  Applications  Group, 
Intel 


Don  Tennant 
Editor  in  Chief, 
Computerworld 


Exclusively  sponsored  by 


The  Power  to  Know® 

SAS  and  all  other  SAS  Institute  Inc.  product  or  service  names  are  registered  trademarks 
or  trademarks  of  SAS  Institute  Inc.  in  the  USA  and  other  countries.  ®  indicates  USA 
registration.  Other  brand  and  product  names  are  trademarks  of  their  respective  compa¬ 
nies.  Intel  and  the  Intel  logo  are  trademarks  or  registered  trademarks  of  Intel 
Corporation  or  its  subsidiaries  in  the  United  States  and  other  countries. 
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terials  situation  —  a  chemical  spill  or 
attack  —  might  affect  IT.  Worries  like 
these  would  have  been  unimaginable 
even  five  years  ago.  But  world  events 
have  changed  the  way  many  CIOs  think 
about  their  disaster  recovery  plans. 

“There  are  definitely  new  threats 
out  there,”  says  Steven  W.  Agnoli,  CIO 
at  law  firm  Kirkpatrick  &  Lockhart 
Nicholson  Graham  LLP  in  Pittsburgh. 

Some  CIOs  are  imagining  potential 
disasters  that  go  well  beyond  the 
everyday  hiccups  that  can  disrupt  ap¬ 
plications  and  networks.  Others,  rec¬ 
ognizing  how  integral  IT  is  to  business 
today,  are  focusing  on  the  need  to  re¬ 
cover  instantaneously  from  any  un¬ 
foreseen  event.  Many  are  trying  to  do 
both.  But  CIOs  agree  that  disaster  re¬ 
covery  planning  has  taken  on  an  imme- 
I  diacy  that  didn’t  exist  in  the  ’90s. 
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Beth  everett’s  brushes 
with  history  have  left  her 
with  better  insights  into 
worst-case  scenarios. 

Everett  worked  at 
Novartis  AG  in  2001  and 
saw  the  company’s 
global  connectivity  cut  off  when  the 
network  lines  under  the  World  Trade 
Center  were  destroyed. 

Then  she  worked  as  CIO  at  Organon 
International  Inc.,  which  shared  space 
in  a  Roseland,  N.J.,  office  park  with  a 
large  financial  services  institution  high 
on  the  list  of  potential  terrorist  targets. 
What  would  happen,  she  remembers 
thinking,  if  officials  shut  down  the  area 
and  employees  couldn’t  get  to  work? 

And  now,  as  a  consultant  at  Network 
Inference  Inc.  in  Carlsbad,  Calif.,  she 
wonders  how  a  potential  hazardous  ma¬ 
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Many  CIOs  have 
changed  the  way 
they  think  about 
disaster  recovery 
How  about  you? 
By  Mary  K.  Pratt 
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Simulation 

Surprises 

Workers  at  Purdue  Pharma  LP  had  a 
rare  chance  to  see  how  well  their  dis¬ 
aster  recovery  plan  might  hold  up  in  a 
real  disaster. 

The  Stamford,  Conn.-based  company  par¬ 
ticipated  in  a  government-sponsored  disaster 
drill  in  April.  Employees  reacted  to  news  of  an 
explosion  and  a  chemical  attack  in  Connecti¬ 
cut  as  well  as  a  bioterrorist  attack  in  New  Jer¬ 
sey.  It  turned  out  that  the  simulated  events 
wouldn’t  have  affected  the  company  or  its  sys¬ 
tems,  but  CIO  Larry  Pickett  says  he  learned  a 
valuable  lesson  about  his  ability  to  recover  data. 

In  previous  disaster  drills,  key  employees 
would  always  gather  at  the  company’s  disas¬ 
ter  recovery  facility  in  New  Jersey.  But  in  an 
actual  disaster,  he  realized,  they  might  not  be 
-able  to  get  to  that  facility.  “It  made  us  step 
back  and  think,  What  if  we  couldn't  access 
that  facility  for  a  few  weeks?"  he  says.  “Only 
by  going'through  a  mock  disaster  would  that 
kind  of  detail  come  out." 

-  Mary  K.  Prat 


And  they  expect  the  threats  to  get 
worse.  “The  things  you  think  about 
are,  What  will  the  virus/hacker  people 
be  able  to  do  10  years  from  now?  What 
do  I  need  to  do  to  keep  my  capabilities 
ahead  of  the  game?”  says  Rob  Reeg,  se¬ 
nior  vice  president  of  global  opera¬ 
tions  at  MasterCard  International  Inc. 

“We  need  to  be  prepared  for  the  next 
level  of  alert,”  says  Joseph  Daluz,  vice 
president  and  CIO  at  Computer  Hori¬ 
zons  Corp.  in  Mountain  Lakes,  N.J. 

Old  Worries  and  New 

When  it  comes  to  disaster  recovery, 
the  concerns  are  diverse.  CIOs  say  they 
still  worry  about  the  traditional  prob¬ 
lems,  from  those  manual  errors  and  lit¬ 
tle  snafus  that  can  crash  a  system  to 
natural  disasters  like  fire  and  flood. 

But  they’ve  also  added  new  concerns 
that  range  from  catastrophic  power 
loss  and  network  attacks  to  employee 
sabotage  and  terrorist  attacks. 

Raj  Sampath,  chief  technology  offi¬ 
cer  at  LoanCity,  a  wholesale  residential 
mortgage  lender  in  San  Jose,  has  con¬ 
sidered  just  about  all  those  scenarios. 
He  says  his  biggest  fear  is  a  hacker  at¬ 
tack.  “It’s  the  unknown  part  —  I  don’t 
know  how  or  when  it’s  going  to  be,” 
Sampath  says. 

He  says  a  successful  attack  could  not 
only  corrupt  his  system  but  also  com¬ 
promise  the  personal  data  of  the  com¬ 
pany’s  customers.  That’s  why  he  has  a 
firewall  manager  —  a  combination  of 
hardware  and  software  that  acts  as  the 


first  point  of  contact  for  the  external 
world,  manages  the  security  of  the  com¬ 
pany’s  systems,  protects  servers  from 
hackers  and  allows  only  certain  speci¬ 
fied  transactions.  Sampath  also  diligent¬ 
ly  keeps  security  software  updated. 

He  worries  about  other  scenarios, 
too,  such  as  earthquakes  knocking  out 
his  primary  data  center  and  employees 
downloading  infectious  programs.  So 
he  sets  up  redundant  systems,  continu¬ 
ally  updates  antivirus  software,  moni¬ 
tors  employee  computer  use  and  uses 
technology  from  San  Jose-based 
Sonasoft  Corp.  that  automates  the 
backup  and  recovery  process  for  Mi¬ 
crosoft  Exchange  and  SQL  and  Win¬ 
dows  servers. 

Other  CIOs  draw  their  new  list  of 
concerns  from  current  events  such  as 
the  9/11  terrorist  attacks  and  the  Au¬ 
gust  2003  blackout  that  affected  the 
Northeast.  They  ask,  “What  if  some¬ 
one  sets  off  a  dirty  bomb?  Or  launches 
a  bioterrorist  attack?  What  happens  if 
the  country’s  aging  power  grid  fails?” 

“It’s  a  different  world.  There  are  so 
many  more  things  to  consider  than  the 
traditional  fire,  flood  and  theft,”  says 
Robert  Rosen,  a  Bethesda,  Md.-based 
CIO  in  the  U.S.  government  and  presi¬ 
dent  of  Share  Inc.,  an  IBM  user  group. 

For  example,  as  he  toured  a  disaster 
recovery  site  last  year,  Rosen  was  im¬ 
pressed  by  its  meticulous  planning  and 
features.  Still,  he  was  concerned  when 
he  heard  a  low-flying  plane  overhead, 
noting  that  a  site’s  proximity  to  an  air¬ 
port  —  even  a  small  one  —  means 
there’s  an  increased  risk  of  it  being  hit 
by  a  crashing  aircraft. 

“There’s  some  risk  there,  even  if  the 
risk  is  pretty  small.  But  it’s  one  of  the 
things  you  factor  into  your  analysis,” 
he  says.  “If  I  were  [with]  an  organiza¬ 
tion  that  had  to  have  total  uptime  no 
matter  what,  maybe  I  couldn’t  live  with 
that  risk.” 

But  that  doesn’t  mean  CIOs  have  to 
prepare  for  every  scenario  they  can 
imagine.  Companies  usually  make  their 
disaster  recovery  decisions  based  on 
cost  and  risk  analysis,  says  David  Paler¬ 
mo,  vice  president  of  marketing  at  Sun- 
Gard  Availability  Services  LP  in  Wayne, 
Pa.  They  prioritize  risks  according  to 
the  likelihood  of  various  scenarios  and 
the  effect  each  one  might  have.  “At  some 
point,  you’re  out  of  money  and  you  have 
to  make  your  choice,”  Palermo  says. 

A  key  to  risk  analysis  is  that  it’s  not 
always  about  full-blown  system  fail¬ 
ures;  even  small  problems  can  have 
significant  consequences. 

“Disaster  has  taken  on  new  meaning 
in  this  era  of  Sarbanes-Oxley  and  all 
this  government  regulation,”  says  Mike 


Kahn,  managing  director  of  The  Clip¬ 
per  Group  Inc.,  a  technology  acquisi¬ 
tion  consultancy  in  Wellesley,  Mass.  If 
regulators  come  knocking,  they  now 
expect  companies  to  produce  all  the 
required  data  within  hours  —  not 
weeks,  as  they  once  did,  he  says. 

But  regulations  aside,  “data  is  now 
just  so  important  to  ongoing  opera¬ 
tions  [that]  if  you  lose  data  and  it’s 
real-time  data,  that  could  actually 
impact  your  business,”  says  Kahn. 


READY 
OR  NOT 

A  survey  of  top  executives  at  50  Fortune 
1,000  companies  showed  mixed  prepared¬ 
ness  for  mishaps  large  and  small. 
Among  the  findings: 
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Q/.  don’t  feel  completely 
u  prepared  to  handle 
a  system  disruption. 


kQA  plan  to  get  their 
u  systems  back  up 
as  quickly  as  pos¬ 
sible  in  the  event  of  a  disaster. 
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OA  plan  to  keep  their 
u  systems  running 
100%  of  the  time. 


^  X'Q/.  say  hackers  are  the 
^  biggest  threat  to 
^/VJ  their  ability  to  ac¬ 
cess  business-critical  information. 
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biggest  threat. 


QA  say  telecommuni- 
/U  cations  break¬ 


downs  are  the 


^  /f  Q4  have  experienced 
^V/_|_  U  a  significant  dis- 
I  ruption  of  services 
within  the  past  year. 

Of  those  disruptions: 


■  5.1  hours  was  the  average  duration. 

■  33%  were  caused  by  a  power  outage. 

■  22%  were  caused  by  a  virus 
or  security  breach. 

■  22%  were  caused  by 

a  hardware  failure. _ _ 

■  30%  caused  companies  to  miss 
service-level  commitments. 


■  24%  caused  customer 
dissatisfaction. 

■  12%  caused  revenue  losses. 


Anne  M.  Candreva,  CIO  at  the 
Carnegie  Library  of  Pittsburgh,  agrees. 
“Technology  is  central  to  what  we  do, 
and  if  we  lose  our  technology  capabili¬ 
ty,  we’ll  come  to  a  halt.” 

Speedy  Recovery 

The  best-prepared  executives  recog¬ 
nize  that  speed  is  essential  in  recover¬ 
ing  from  whatever  disaster  might  come 
to  pass,  Kahn  says.  That’s  why  there’s 
a  trend  toward  enabling  technology 
users  to  restore  their  own  documents, 
so  a  lawyer,  for  example,  can  retrieve  a 
brief  that  took  weeks  to  write  but  an 
instant  to  accidentally  delete. 

And  in  addition  to  regularly  backing 
up  to  tape  that’s  then  stored  off-site, 
companies  are  employing  newer  tech¬ 
nologies  to  take  snapshots  —  every 
five  minutes,  or  every  hour,  depending 
on  the  business  —  to  reduce  the  risk  of 
potential  loss,  Kahn  says. 

But  while  the  technology  exists  to 
ensure  that  a  company  doesn’t  experi¬ 
ence  a  catastrophic  loss  of  data  even  if 
its  systems  go  down,  experts  say  exec¬ 
utives  need  to  make  disaster  recovery 
a  priority  —  and  fund  it  appropriately 
—  if  they  want  to  guarantee  business 
continuity  during  almost  any  situation. 

“There’s  no  lack  of  products,  and  no 
lack  of  salespeople  out  there  who  want 
to  sell  them  to  you,”  Rosen  says.  “So 
it’s  not  a  technological  issue  any  more. 
It’s  really  a  management  issue  and  a 
will  to  do  it.  One  of  the  problems  is 
it’s  not  cheap.” 

Robert  Borr,  CIO  at  Quincy  Medical 
Center  Inc.  in  Quincy,  Mass.,  has  tried 
to  protect  his  organization  from  just 
about  any  disaster  that  could  take  out 
his  systems.  In  addition  to  strict  back¬ 
up  procedures,  he  has  agreements  with 
hardware  vendors  to  deliver  new 
equipment  within  24  hours  if  needed. 

He  pays  extra  for  that  but  says,  “If 
we  can  get  computers  delivered  within 
24  hours,  we  can  be  up  and  running 
seven  or  eight  hours  after  that.” 

Others  have  taken  even  more  aggres¬ 
sive  approaches  to  guarantee  that 
they’re  prepared  for  anything.  Agnoli 
says  his  law  firm  increasingly  focuses 
on  building  in  redundancies  to  ensure 
that  if  an  office  system  is  taken  out  or 
an  e-mail  server  goes  down,  another 
one  can  quickly  take  over,  averting  a 
crisis  while  the  problem  is  being  fixed. 

“The  goal,”  Agnoli  says,  “is  to  avoid 
ever  having  to  get  into  a  disaster  re¬ 
covery  situation  if  we  can.”  ©  54795 


Pratt  is  a  Computerworld  contributing 
writer  in  Waltham,  Mass.  Contact  her  at 
marykpratt@verizon.net. 
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The  End  of  Corporate  IT? 


Recent  data  shows 
it’s  not  how  much 
you  spend  on  IT;  it’s 
how  you  spend  it. 

When  Nicholas 
G.  Carr  famous¬ 
ly  asserted  that 
“IT  doesn’t  mat¬ 
ter”  in  2003,  he 
backed  up  his 
thesis  with  data 
gathered  by  IDC 
and  Orlando- 
based  consulting 
firm  Alinean 
Inc.  After  Carr’s  recent  predic¬ 
tion  of  the  end  of  corporate 
IT  [QuickLink  53976],  Alinean 
CEO  Tom  Pisello  told  Computer- 
world’s  Kathleen  Melymuka 
that  continued  research  has 
raised  some  very  interesting 
findings  about  the  relationship 
of  IT  spending  and  business 
success. 

Is  Nicholas  Carr  on  to  something  in 
touting  the  end  of  corporate  IT? 

Carr’s  claim  that  IT  has  be¬ 
come  a  commodity  utility  has 
fueled  a  two-year  debate  on 
whether  technology  invest¬ 
ments  deliver  competitive 
advantage.  On  one  hand,  we 
agree  that  corporate  IT  often 
spends  too  much  to  “keep  the 
lights  on.”  Most  companies  in¬ 
vest  more  than  65%  of  IT  bud¬ 
gets  on  basic  infrastructure 
like  PCs,  servers,  e-mail  and 
storage. 

But  it’s  important  to  differ¬ 
entiate  between  infrastructure 
investments  and  strategic  in¬ 
vestments.  Strategic  IT  invest¬ 
ments,  especially  when  closely 
aligned  with  business  goals, 
prove  that  technology  can 
deliver  a  competitive  edge. 


What  do  the  numbers  say?  Tell  me 
what  the  Alinean/IDC  pre-2003 
research  showed  about  IT  spend¬ 
ing  and  corporate  performance.  IT 

spending  and  performance  re¬ 
search  have  to  be  examined  in 
context  with  the  market.  When 
Carr  used  our  2003  research  in 
his  original  Harvard  Business 
Review  article,  market  condi¬ 
tions  were  really  tough.  Back 
then,  we  found  that  top-per¬ 
forming  companies,  or  those 
with  the  highest  Economic 
Value  Added,  were  notably 
frugal  with  IT  dollars.  These 
high  performers  were  spend¬ 
ing  less  than  1%  of  overall  rev¬ 
enue  on  IT,  while  the  average 
company  spent  3.7%  and  the 
laggards  were  spending  2.7%. 

And  continued  research  shows  es¬ 
sentially  the  same  thing,  right?  Yes, 
top-performing  companies 
continue  to  be  more  frugal  in 
their  IT  spending,  spending 
0.5%  less  on  IT  as  a  percentage 
of  revenue  versus  the  average 


company.  But  the  spending 
gap  has  narrowed  significantly. 

You  say  the  research  since  2003 
shows  that  something  else  is  going 
on.  What  is  it?  Leading  compa¬ 
nies  have  bumped  up  spend¬ 
ing  in  recent  years  as  market 
conditions  improve.  In  2004, 
they  doubled  investments  in 
IT  to  1.6%  of  revenue,  and  in 
2005,  [they]  spent  2.8%  of  rev¬ 
enue.  They’re  making  up  for 
frugal  cuts  in  years  prior  and 
now  are  investing  rapidly 
to  ensure  they’re  poised  to 
capture  market  and  growth 
opportunities. 

What’s  the  significance  of  this  find¬ 
ing?  Leaders  are  incredibly  ag¬ 
ile  with  spending.  In  contrast, 
average  companies  and  lag¬ 
gards  have  held  IT  investment 
relatively  constant,  averaging 
3.7%  and  2.7%,  respectively, 
over  the  past  three  years. 

Also,  when  you  look  at  IT  spending 


per  employee,  the  picture  changes. 
Tell  me  about  that.  Interestingly, 
leaders  spend  more  per  em¬ 
ployee  on  IT  than  an  average 
company  —  in  fact,  about  $500 
more  each  year.  IT  investments 
help  these  companies  do  more 
with  fewer  people,  or  better 
manage  outsourcing  initiatives. 

What  the  majority  of  com¬ 
panies  care  about  most  is  the 
efficiency  of  IT  spending  and 
its  ultimate  effectiveness  at 
driving  corporate  profitability. 
That’s  why  we  created  the 
Return  on  IT  [ROIT]  metric, 
a  ratio  of  a  company’s  finan¬ 
cial  performance  divided  by 
IT  spending. 

The  ROIT  findings  are  dra¬ 
matic.  Leaders  boast  a  426% 
higher  ROIT  than  average 
companies,  spending  less 
but  getting  more  from  each 
investment.  Companies  like 
Anheuser-Busch,  Coca-Cola, 
Sara  Lee,  U.S.  Bancorp,  John¬ 
son  &  Johnson,  Dell,  Bell¬ 
South  and  Procter  &  Gamble 
consistently  deliver  good  per¬ 
formance,  even  in  struggling 
markets  or  while  facing  unique 
business  challenges. 

You’ve  tried  to  distill  some  com¬ 
monalities  among  companies  that 
achieve  the  highest  return  on  IT 
investment.  What  have  you  found? 

While  there  is  no  single  prac¬ 
tice  common  to  every  compa¬ 
ny  achieving  a  high  ROIT 
ranking,  certain  philosophies 
hold  true  across  the  board. 
First,  directing  IT  investments 
in  support  of  initiatives  that 
will  fuel  competitive  advan¬ 
tage  consistently  delivers  the 
greatest  success.  Second,  fis¬ 
cal  discipline  is  important,  but 
leaders  cut  costs  of  ongoing 
maintenance  so  that  precious 
funds  can  be  allocated  to 
more-innovative  initiatives. 
Third,  agility  in  ramping  or 
trimming  spending  keeps  com¬ 
panies  ahead  of  market  condi¬ 
tions,  maintaining  profitability 
and  a  solid  bottom  line. 

So  where  does  all  this  leave  Carr’s 
argument?  In  many  ways,  basic 
IT  infrastructure  has  indeed 
become  a  commodity  that 
should  be  treated  as  a  utility 
where  cost  reductions  reign. 
However,  lumping  all  IT  in¬ 
vestments  into  the  commodity 


category  is  the  critical  over¬ 
sight  in  Carr’s  argument. 

The  new  model  you’ve  developed 
to  look  at  IT  value  is  what  you  call 
the  IT  Hierarchy  of  Needs.  Explain 
what  the  hierarchy  is.  Much  like 
Maslow’s  Hierarchy  of  Needs 
in  human  development,  the  IT 
Hierarchy  of  Needs  segments 
IT  spending  into  four  progres¬ 
sive  levels. 

The  first  level  is  basic  IT  in¬ 
frastructure  —  the  core  foun¬ 
dation  for  corporate  comput¬ 
ing  including  servers,  network¬ 
ing,  storage,  desktops,  mobili¬ 
ty  and  telecommunications. 

The  second  level  includes 
the  tools  to  automate  manual 
tasks  and  processes,  stream¬ 
line  transactions  and  foster 
creativity  and  collaboration. 

The  third  level  includes  all 
applications  to  support  the 
collection,  visualization  and 
application  of  information 
to  measure  the  business  and 
drive  improved  performance. 

The  fourth  and  highest  level 
is  how  a  company  uses  its  in¬ 
formation  to  change  the  play¬ 
ing  field  by  creating  different 
relationships  with  suppliers, 
partners  and  customers,  as 
well  as  applying  competitive 
insight. 

How  does  a  company  apply  the 
hierarchy?  Only  when  the  most 
basic  level  of  IT  need  has 
reached  maturity  can  the  orga¬ 
nization  successfully  invest  in 
the  next  highest  level.  Once  the 
level  of  need  has  been  met,  the 
company  should  try  to  reduce 
that  category’s  cost  of  owner¬ 
ship  as  much  as  possible,  while 
making  sure  that  the  founda¬ 
tion  remains  solid.  But  the 
company  can’t  stop  there.  Pur¬ 
suing  each  next  highest  level  in 
the  hierarchy  will  keep  it  from 
falling  behind  the  competition. 

So,  what  should  a  CIO  do  about 
all  this?  The  sawiest  of  CIOs 
should  be  armed  to  illustrate 
this  hierarchy  of  investments 
to  their  financial  and  executive 
counterparts,  demonstrating 
infrastructure  cost  reductions 
and  the  ROI  achievable  by  allo¬ 
cating  freed  resources  to  the 
strategic  investments  that  will 
drive  bottom-line  improve¬ 
ments.  ©  54891 
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Macworld 

*  July  11-14,  Boston 
Sponsor:  IDG 

Macworld  2005  includes  tracks  on 
IT  issues,  including  Mac  OS  trouble¬ 
shooting,  management  and  admin¬ 
istration,  advanced  user  topics, 
servers  and  services;  power  tools 
such  as  Adobe  Creative  Suite,  Mac 
OS  X  Server,  Professional  Photo¬ 
shop,  advanced  Macintosh  music 
production,  Final  Cut  Pro,  Flash  MX 
2004  and  FileMaker  Pro;  and  con¬ 
sumer  topics. 
www.macworldexpo.com 


Linuxworld 

h  Aug.  8-11,  San  Francisco 
Sponsor:  IDG 

Linuxworld  Conference  &  Expo  in¬ 
cludes  tracks  on  the  business  case 
for  Linux,  such  as  maximizing  com¬ 
petitive  advantage  with  enterprise 
open-source,  the  legal  landscape, 
and  licenses  and  licensing;  systems 
and  application  management  issues, 
such  as  integrating  with  the  rest  of 
the  enterprise  and  Unix-to-Linux 
migration;  and  enterprise  security. 
www.linuxworldexpo.com 


HP  World 

■  Aug.  14-18,  San  Francisco 
Sponsor:  Interex 

HP  World  2005  includes  tracks  on 
disaster  recovery  and  backup,  en¬ 
terprise  management,  heteroge¬ 
neous  environments,  HP-UX,  Linux, 
mobile/wireless,  networking,  secu¬ 
rity,  server  hardware,  storage,  sys¬ 
tems  administration  and  OpenVMS. 
www.hpvyorld.com 


Consumer  Forum 

■  Sept.  27-28,  New  York 
Sponsor:  Forrester  Research  Inc. 

Consumer  Forum  2005:  Innovating 
in  a  Consumer-Driven  World  in¬ 
cludes  presentations  on  various 
types  of  innovation,  including  Re¬ 
tail:  Reaching  the  Cross-Channel 
Consumer;  Media:  Creating  a  Brand 
for  the  21st  Century;  Manufacturing: 
Reinventing  the  Customer  Relation¬ 
ship;  and  Technology:  Balancing 
Proprietary  Versus  Open  Standards. 
www.forrester.com/events 


BARBARA  GOMOLSKI 


Learning  From  IT 
Data 


IT  WAS  THE  BEST  OF  TIMES,  it  was  the  worst  of 
times.  The  opening  line  from  Dickens’  A  Tale  of 
Two  Cities  seems  appropriate  to  describe  the  cur¬ 
rent  situation  in  IT  risk  management. 

The  worst  of  times:  Unless  you’ve  been  living  in 
a  cave,  you’re  aware  of  several  recent  high-profile  cases 
where  mismanagement  of  IT  risk  has  caused  organiza¬ 
tions  great  pain.  Let’s  quickly  review  some  of  the  more 


significant  cases: 

1.  Last  December,  Comair 
canceled  about  1,000  flights 
when  its  crew-scheduling 
software  failed.  (Ongoing 
performance  and  capacity 
planning,  thorough  applica¬ 
tion  testing  and  proper  risk 
management  might  have 
averted  the  disaster.)  The 
incident  stranded  thou¬ 
sands  of  customers  and  in¬ 
flicted  a  public  relations 
wound  on  the  ailing  airline 
sector. 

2.  In  February,  Choice- 
Point,  a  credit  and  personal 
information  vendor,  informed  145,000 
consumers  that  they  may  have  been 
victims  of  identify  theft  in  connection 
with  a  data  breach  last  fall. 

3.  In  March,  LexisNexis  announced 
that  more  than  30,000  people  may  have 
been  affected  by  breaches  of  its  data¬ 
base  security.  The  data  broker  later 
stated  that  the  number  of  people  po¬ 
tentially  affected  is  closer  to  300,000. 

In  addition,  DSW  and  Bank  of 
America  have  also  had  their  brands 
tarnished  by  IT  security  woes.  It  seems 
that  just  about  every  day,  some  corpo¬ 
rate  stalwart  finds  itself  in  the  national 
media  spotlight  over  the  mishandling 
of  customer  and  corporate  data. 

And  let’s  not  forget  about  wide¬ 
spread  phishing  attacks,  in  which 
thieves  use  fraudulent  e-mail  accounts 


or  Web  sites  to  obtain  per¬ 
sonal  account  information 
from  gullible  consumers. 
Several  U.S.  banks  have 
been  victims  of  phishing, 
and  in  the  U.K.,  such  at¬ 
tacks  recently  caused  a 
number  of  large  banks  to 
temporarily  halt  transfers 
of  funds  between  their  own 
accounts. 

The  best  of  times:  Clearly, 
these  IT  security  mishaps 
are  bad  for  the  companies 
involved.  We’re  talking 
about  serious  business 
“outages”  that  are  costing 
them  millions  of  dollars  and  causing 
serious  damage  to  their  brands.  So, 
how  can  these  blunders  be  described 
as  anything  but  horrific?  Isn’t  this  se¬ 
ries  of  events  a  crushing  blow  to  the 
battered  image  of  IT? 

While  such  IT  security  breaches  are 
certainly  unfortunate  (and  often  pre¬ 
ventable),  they  are  valuable  to  the  IT 
industry  because  they  provide  real-life 
examples  of  how  interlinked  IT  and 
business  have  become.  In  particular, 
these  breaches  of  IT  security  and  mis- 
handlings  of  customer  data  serve  as  a 
much-needed  wake-up  call  to  business 
leaders  who  believe  they  can  cut  IT 
budgets  to  the  bone  with  no  discern- 
able  impact  on  their  operations  except 
for  healthier-looking  bottom  lines. 

Just  as  the  accounting  scandals  at 
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companies  such  as  Enron  focused  cor¬ 
porations  on  compliance  and  financial 
propriety,  these  mishaps  could  bring 
the  importance  of  the  information 
management  discipline  to  the  fore¬ 
front.  In  many  organizations,  this 
would  be  a  welcome  change. 

For  the  past  few  years,  many  CFOs 
and  CEOs  have  been  systematically 
squeezing  IT  budgets  —  believing 
there  would  be  no  downside  to  their 
actions.  Specifically,  they  have  stripped 
IT  budgets  to  the  point  where  there  are 
barely  enough  resources  to  keep  the  in¬ 
frastructure  and  applications  running 
—  never  mind  supporting  efforts  to 
minimize  IT  risk.  I  believe  that  the  re¬ 
cent  flurry  of  IT  risk  problems  is  partly 
a  result  of  that. 

IT  departments  are  so  strapped  right 
now  that  they  have  neither  the  time 
nor  the  resources  to  initiate  the  kinds 
of  measures  that  could  have  prevented 
many  of  the  recent  IT  risk  debacles. 
Clearly,  IT  can’t  be  seen  as  completely 
blameless  in  these  incidents,  and  we  all 
need  to  think  long  and  hard  about  how 
we  manage  customer  information.  I 
cast  more  blame  on  the  bean  counters 
here  than  on  IT,  however.  In  their 
quest  for  more  profits,  these  top  execu¬ 
tives  have  sold  IT  short.  They  have 
also  failed  to  realize  that  IT  risk  and 
business  risk  are  one  and  the  same. 

My  advice  to  IT  managers:  Get  your 
IT  risk  house  in  order.  While  you’re 
at  it,  use  these  painful  and  dramatic 
lessons  to  paint  a  vivid  picture  for  top 
executives  of  what  happens  when  they 
continually  squeeze  IT  budgets.  Then 
give  them  the  information  they  need  to 
make  the  right  decisions.  It’s  sad  to  say, 
but  your  message  is  more  likely  to  res¬ 
onate  now  that  a  number  of  highly  visi¬ 
ble  companies  have  suffered.  ©  54799 
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Pricing  Penalty? 

One  chip,  or  two?  How  software  vend( 
will  charge  for  multicore  chips  is  still 
debate.  Meanwhile,  users  like  Southw 
Chris  Easterwood  are  left  to  decide 
whether  to  adopt  multicore.  PAGE  52 


Counting  Cores 

The  newest  processors  cram 
two  or  more  CPUs  onto  a  single 
chip.  Here’s  why  the  industry  is 
moving  to  multicore  and  what 
you’ll  get  out  of  it.  PAGE  48 
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Hardware’s  Cool  Again 

Upgrading  computers  simply  for  the 
sake  of  faster  microprocessors  is  so 
yesterday,  says  columnist  Mark  Hall. 
And  so  tomorrow,  too.  PAGE  60 


Multiple 
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Multiple 

Challenges 


SPECIA 

REPORT 


The  new  multicore  chips  are 
fast,  but  there  are  programming 
and  licensing  challenges  ahead. 


EDITOR’S  NOTE 


Analysts  say  there  are 

several  megatrends  in  the 
world  of  computer  hard¬ 
ware,  including  server  vir¬ 
tualization,  the  transition 
from  32-  to  64-bit  processors,  and  the 
introduction  of  dual-core  chips.  This 
special  report  is  about  the  latter. 

The  move  to  these  multitasking 
chips  is  huge:  By  2007,  most  of  the 
processors  shipped  will  have  two 
cores.  The  dual-core  chips  provide 
the  greatest  advance  in  performance 
since  the  introduction  of  the  386,  says 


Gartner  analyst  Martin  Reynolds,  but 
he  adds  that  developers  and  users 
must  test  and  tune  their  software  to 
receive  the  full  benefit. 

According  to  Reynolds,  dual-core 
processors  will  deliver  up  to  70%  bet¬ 
ter  performance  than  a  single-core 
processor  of  equivalent  speed  —  for 
certain  applications.  He  says  the  dual¬ 
core  chips  will  be  ideal  for  servers 
with  processors  working  at  high  uti¬ 
lization  rates  (such  as  when  they’re 
running  virtualization  software),  and 
for  desktop  applications  such  as  media 


editing,  computer-aided  design,  simu¬ 
lation  programs  and  Adobe  Acrobat. 

It’s  a  pretty  big  change,  which  is 
why  we’ve  looked  into  the  ramifica¬ 
tions  for  corporate  IT  shops.  What 
we  found  is  that  although  there  are 
some  technical  challenges,  they  pale 
in  comparison  with  the  software  li¬ 
censing  issue  covered  by  Patrick  Thi¬ 
bodeau  (page  52).  Oracle  treats  dual 
cores  as  two  separate  processors  for 
licensing  purposes,  for  example,  and  I 
wonder  just  how  long  the  market  will 
tolerate  that  sort  of  financial  penalty 


for  what  the  user  views  as  simply  a 
more  powerful  chip.  Reynolds  advises 
buyers  to  prenegotiate  multicore  soft¬ 
ware  licenses  to  avoid  a  nasty  budget 
surprise.  ©  54735 
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The  newest  processors  cram  two  or 
more  CPUs  onto  a  single  chip.  Here’s 
why  the  industry  is  moving  to  multi¬ 
core  and  what  you’ll  get  out  of  it. 

By  Russell  Kay  and  Patrick  Thibodeau 

••••••••••••••••••••••••••••• 


IN  1965,  when  he  first  set  out  what 
we  now  call  Moore’s  Law,  Gordon 
Moore  (who  later  co-founded  In¬ 
tel  Corp.)  said  the  number  of  com¬ 
ponents  that  could  be  packed  onto 
an  integrated  circuit  would  double 
every  year  or  so  (later  amended  to  18 
months;  see  QuickLink  31559  for  more). 

In  1971,  Intel’s  4004  CPU  had  2,300 
transistors.  In  1982,  the  80286  debuted 
with  134,000  transistors.  Now,  run- 
of-the-mill  CPUs  count  upward  of 
200  million  transistors,  and  Intel  is 
scheduled  to  release  a  processor  with 
1.7  billion  transistors  for  later  this  year. 

For  years,  such  progress  in  CPUs 
was  clearly  predictable:  Successive 
generations  of  semiconductor  technol¬ 
ogy  gave  us  bigger,  more  powerful 
processors  on  ever-thinner  silicon  sub¬ 
strates  operating  at  increasing  clock 
speeds.  These  smaller,  faster  transis¬ 
tors  use  less  electricity,  too. 

But  there’s  a  catch.  It  turns  out  that 
as  operating  voltages  get  lower,  a  sig¬ 
nificant  amount  of  electricity  simply 
leaks  away  and  ends  up  generating  ex¬ 
cessive  heat,  requiring  much  more  at¬ 
tention  to  processor  cooling  and  limit¬ 
ing  the  potential  speed  advance  — 
think  of  this  as  a  thermal  barrier. 

To  break  through  that  barrier,  proc¬ 
essor  makers  are  adopting  a  new  strat¬ 
egy,  packing  two  or  more  complete,  in¬ 
dependent  processor  cores,  or  CPUs, 
onto  a  single  chip.  This  multicore 
processor  plugs  directly  into  a  single 
socket  on  the  motherboard,  and  the 
operating  system  sees  each  of  the  exe¬ 
cution  cores  as  a  discrete  logical 
processor  that  is  independently  con¬ 
trollable.  Having  two  separate  CPUs 
allows  each  one  to  run  somewhat 
slower,  and  thus  cooler,  and  still  im¬ 
prove  overall  throughput  for  the  ma¬ 
chine  in  most  cases. 

Designed  for  Speed 

From  one  perspective,  this  is  merely  an 
extension  of  the  design  thinking  that 
has  for  several  years  given  us  n-way 
servers  using  two  or  more  standard 
CPUs;  we’re  simply  making  the  pack¬ 
aging  smaller  and  the  integration  more 
complete.  In  practice,  however,  this 
multicore  strategy  represents  a  major 
shift  in  processor  architecture  that  will 
quickly  pervade  the  computing  indus¬ 
try.  Having  two  CPUs  on  the  same  chip 
rather  than  plugged  into  two  separate 
sockets  greatly  speeds  communication 
between  them  and  cuts  waiting  time. 

The  first  multicore  CPU  from  Intel 
is  already  on  the  market.  By  the  end  of 
2006,  Intel  expects  multicore  proces¬ 
sors  to  make  up  40%  of  new  desktops, 
70%  of  mobile  CPUs  and  a  whopping 


85%  of  all  server  processors  that  it 
ships.  Intel  has  said  that  all  of  its  future 
CPU  designs  will  be  multicore.  Intel’s 
major  competitors  —  including 
Advanced  Micro  Devices  Inc.,  Sun 
Microsystems  Inc.  and  IBM  —  each 
appear  to  be  betting  the  farm  on 
multicore  processors. 

Besides  running  cooler  and  faster, 
multicore  processors  are  especially 
well  suited  to  tasks  that  have  opera¬ 
tions  that  can  be  divided  up  into  sepa¬ 
rate  threads  and  run  in  parallel.  On  a 
dual-core  CPU,  software  that  can  use 
multiple  threads,  such  as  database 
queries  and  graphics  rendering,  can 
run  almost  100%  faster  than  it  can  on 
a  single-CPU  chip. 

However,  many  applications  that 
process  in  a  linear  fashion,  including 
communications,  backup  and  some 
types  of  numerical  computation,  won’t 
benefit  as  much  and  might  even  run 
slower  on  a  dual-core  processor  than 
on  a  faster  single-core  CPU. 

Power  and  Performance 

Two  users  who  have  tested  AMD’s 
Opteron  dual-core  chips  and  moved 
them  into  production  say  they  are  get¬ 
ting  performance  that’s  close  to  double 
the  processing  performance  of  a  single 
chip. 

Neal  Tisdale,  vice  president  for  re¬ 
search  and  development  at  NewEnergy 
Associates,  an  Atlanta-based  firm  that 
conducts  intensive  analytical  testing 
for  the  natural  gas  industry,  has  been 
using  the  Opteron  dual-core  chips  sup¬ 
plied  on  systems  built  by  Sun. 

Tisdale  says  Sun  is  putting  in  an  ad¬ 
dress  decoder  for  each  CPU,  which  in¬ 
creases  throughput  on  his  four-way 
machines.  Address  decoding  helps  a 
CPU  access  memory  more  efficiently. 


Intel  is  now  discussing  whether  it 
should  allow  users  to  speed  up  one  of 
the  two  CPUs  on  a  dual-core  chip  be¬ 
yond  its  original  design  speed  to  boost 
performance.  Called  . 
this  is  done  routinely  by  computer 
gamers,  but  it  does  lead  to  hotter  oper¬ 
ation  and  a  greater  chance  of  failure. 
Intel  normally  warns  strongly  against 
overclocking,  citing  possible  perma¬ 
nent  damage  to  the  processor  and 
perhaps  other  system  components, 
including  the  motherboard.  Other  po¬ 
tential  problems  include  the  inability 
to  boot,  calculation  errors,  shorter 
processor  life  -  and  a  voided  warranty. 
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Cashing  in 

AN  IMPORTANT  element  of  any  • 

CPU  design  -  one  that  accounts  for  • 
using  up  many  of  those  millions  of  l 
transistors  -  is  the  amount  of  on-  • 
chip  cache  memory  that  is  included.  • 
Cache  design  -  and  having  ade-  l 
quate  amounts  of  cache  -  is  critical  I 
to  overall  CPU  efficiency.  Those  parts  * 
of  a  CPU  that  actually  execute  in¬ 
structions  spend  a  lot  of  time  waiting  l 
around  for  slower  1/0  devices,  such  as  l 
memory  chips  and  hard  drives,  which  ; 
means  that  faster  processors  don’t  • 
always  make  for  faster  computing.  • 
Chip  designers  have  figured  out  l 
tricks  to  get  around  these  problems,  l 
such  as  the  use  of  branch  prediction,  • 

multiple  pipelines  and  hyperthread-  • 


on  Cache 

ing,  but  they  go  only  so  far.  When 
an  instruction  requires  data  that’s  al¬ 
ready  in  the  processor's  second-level 
cache,  it  may  have  to  wait  only  one  or 
two  cycles,  and  during  that  period,  it 
may  be  able  to  execute  (out  of  normal 
order)  other  instructions  that  don't 
depend  on  the  result  it's  waiting  for. 

Unfortunately,  such  out-of-order 
execution  can’t  handle  more  than  a 
dozen  or  so  instructions,  and  if  the 
CPU  has  to  wait  for  data  from  main 
(not  cache)  memory,  it  will  be  held  up 
for  periods  during  which  it  could  oth¬ 
erwise  execute  hundreds  of  instruc¬ 
tions.  For  more  on  cache  memory,  see 
QuickLink  a6140. 

-Russell  Kay 


But  some  vendors  limit  the  number 
of  address  decoders  on  the  chip,  and 
that  crimps  performance,  says  Tisdale. 
“It  actually  depends  what  [server] 
vendor  you  buy  from  as  to  how  much 
dual-core  does  for  you,”  he  says. 

Another  industry  that  sees  chip  per¬ 
formance  as  a  competitive  edge  is  trav¬ 
el.  Customers  want  to  choose  from 
hundreds  of  flight  and  hotel  options 
when  booking  travel  online,  and  it’s 
the  system’s  task  to  deliver  them 
quickly,  says  Alan  Walker,  vice  presi¬ 
dent  of  technology  prototyping  and 
integration  at  Sabre  Holdings  Corp. 

The  Southlake,  Texas-based  company 
operates  Travelocity  and  other  online 
travel-booking  services. 

“You  can  never  be  fast  enough  or 
cheap  enough  for  this  type  of  process¬ 
ing,”  says  Walker.  Sabre  has  always 
used  Opteron  chips  and  began  testing 
the  dual-core  versions  on  Hewlett- 
Packard  Co.  ProLiant  servers,  which 
were  shipped  to  its  outsourcer,  Elec¬ 


tronic  Data  Systems  Corp. 

The  IT  team  spent  a  week  testing 
the  system  and  put  it  into  production 
two  days  before  AMD  officially  re¬ 
leased  the  chip  in  April.  “There  were 
no  installation  issues,”  Walker  says. 
“They  put  the  same  system  image  on 
the  dual-core  machine,  and  it  booted 
without  any  problems.” 

Walker  says  he  anticipates  a  bright 
future  for  dual-core  Opteron  chips,  as 
long  as  the  software  scales  reliably 
across  a  large  number  of  systems. 
“These  dual-core  Opterons  are  way 
ahead  of  anyone  else,”  he  says.  O  54314 


Kay  is  a  Computerworld  contributing 
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All  the  new  general-purpose 
multicore  processor  designs 
that  have  been  announced  by 
Intel,  AMD,  Sun  and  IBM  are 
based  on  symmetrical  multi¬ 
processing  (SMP),  a  parallel 
architecture  in  which  all 
processors  run  a  single  copy 
of  the  operating  system,  share 
the  memory  and  other  re¬ 
sources  of  one  computer,  and 
have  equal  access  to  memory, 
I/O  and  external  interrupts 
[QuickLink  a6160].  Most  are 
organized  using  some  varia¬ 
tion  of  the  following  plan: 


CPU  Core  2 


CPU  Corel 


Level  1 
cache 


Level  1 
cache 


Level  2  cache 
shared  by  both 
CPU  cores 


Memory  controller 

I/O  interface 

Single  socket  pins 


•  •  • 


9  9  9  9 


9  • 


5 


Future  Chips:  Hundreds  of  Threads 


CHIP  MAKERS  ARE  ALREADY 

creating  designs  that  stretch  beyond 
two  cores. 

Just  last  month,  Raza  Microelec¬ 
tronics  Inc.  in  Cupertino,  Calif.,  began 
shipping  its  XLR  processor  line  with 
up  to  eight  cores  operating  at  a  fre¬ 
quency  of  up  to  1.5  GHz.  Each  proc¬ 
essing  core  supports  four  threads, 
or  simultaneous  instructions,  for  32 
total  threads. 

The  product  family  is  aimed  at  con¬ 


verged  networking  and  computing  ap¬ 
plications,  according  to  the  company. 
It  will  reportedly  be  in  manufacturers’ 
equipment  late  this  year. 

Sun’s  90-nanometer  UltraSparc 
IV  chip  for  high-end  servers,  code- 
named  Niagara  and  due  in  2006,  will 
also  reportedly  support  up  to  eight 
cores,  each  handling  four  threads. 

Meanwhile,  as  the  industry  moves 
to  65nm  technology,  more  transistors 
will  fit  on  the  same  silicon  real  estate. 


“Operating  them  at  a  slightly  lower  fre¬ 
quency  and  voltage  allows  chips  with 
four  or  more  cores  to  run  without  sig¬ 
nificantly  increasing  the  power  enve¬ 
lope,”  explains  Jeff  Austin,  product 
marketing  manager  in  Intel’s  business 
client  group. 

Intel’s  Tukwila  processor,  the  first 
in  the  company’s  65nm  Itanium  proc¬ 
essor  family  for  multiprocessing 
servers,  will  contain  four  or  more 
cores  and  is  due  around  2007. 

Austin  says  he  also  expects  that 
between  2008  and  2010,  Intel  will 
ship  single-processor  implementa¬ 
tions  supporting  up  to  eight  threads 
using  parallel-execution  cores  or 
cores  with  symmetric  multithreading. 
On  the  server  side,  that  translates  into 
32  parallel  threads,  he  says. 

“In  the  next  10  years  or  so,  we’re 
looking  at  tens  to  hundreds  of  cores 
within  a  processor,  including  special- 
purpose  and  asymmetrical  cores,  to 
deliver  hundreds  and  thousands  of 
parallel-capable  threads,”  Austin  says. 

Real-World  Translation 

Driving  the  multicore  activity  is  the  de¬ 
sire  to  achieve  greater  performance 
with  as  much  power  efficiency  as  pos¬ 
sible.  In  cell  phones  and  mobile  com¬ 
puters,  this  means  “being  able  to  do 
more-complex  applications  without 


running  out  of  battery  really  fast,”  says 
Sven  Behmer,  CEO  of  Foster  City, 
Calif.-based  PolyCore  Software  Inc., 
which  offers  multicore  software  devel¬ 
opment  and  management  tools. 

On  the  desktop,  says  Austin,  the 
need  to  run  virus  scans  and  other  hefty 
programs  in  background  mode  while 
maintaining  strong  foreground  re¬ 
sponse  time  is  pushing  performance 
demand,  as  is  the  need  to  manage 
streaming  high-definition  content. 

“Games  can  take  advantage  of 
greater  degrees  of  parallelism  and 
threading  for . . .  using  artificial  intelli¬ 
gence  instead  of  predefined  actions 
[to  calculate  what  happens]  when  you 
face  off  with  a  robot  or  to  compute 
how  glass  breaks  when  you  jump 
through  a  window,”  says  Austin. 

On  the  server  side,  Intel  also  sees 
multicore  as  benefiting  the  enterprise 
trend  toward  data  center  consolida¬ 
tion.  In  a  virtual  computing  environ¬ 
ment,  enterprises  can  merge  several 
software  environments  onto  fewer 
machines  and  distribute  tasks  across 
different  virtual  machines. 

Behmer  observes  that  having  mul¬ 
tiple  processors  on  a  chip  may  make 
it  possible  to  increase  the  yield  in  the 
manufacturing  process.  “If  one  of  four 
is  defective,  you  could  sell  a  two-  or 
three-processor  chip,"  he  says.  "So 


you  could  use  a  higher  percentage  of 
what  comes  out  of  the  process." 

Multicore  systems  offer  innovation 
for  gaining  performance  advantages 
but  also  affect  existing  software  de¬ 
ployments  and  developer  skills. 

For  example,  Ken  Kennedy,  direc¬ 
tor  of  the  Center  for  High  Performance 
Software  Research  at  Rice  University 
in  Houston,  notes  that  “many  applica¬ 
tions  will  need  to  be  parallelized  if  they 
want  to  see  performance  boosts  on 
such  processors." 

Development  has  some  chal¬ 
lenges,  however.  Most  operating  sys¬ 
tems  are  designed  to  run  on  a  single 
processor.  And  while  symmetric  multi¬ 
processing  is  relatively  simple  in  that 
the  operating  system  handles  the 
task  of  load  balancing,  says  Behmer, 
asymmetric  multiprocessing  leaves 
the  partitioning  of  tasks  across  multi¬ 
ple  threads  to  the  developer. 

An  increasing  number  of  proces¬ 
sors  -  including  hardware  accelera¬ 
tors,  digital  signal  processors,  filters 
and  other  specialized  components  - 
are  showing  up.  For  that  reason, 
Behmer  says  he  expects  the  impor¬ 
tance  of  memory,  as  well  as  connec¬ 
tion  subsystems  for  moving  data  as 
efficiently  as  possible  among  them,  to 
increase.  He  predicts  that  as  a  result, 
a  “network  on  a  chip”  -  such  as  a 
mesh  of  wires  among  components  or 
multilevel  buses  -  will  likely  emerge 
within  a  decade  or  so. 

-  Joanie  Wexler 
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What’s  Out  There 


■  Systems  using  Intel’s  first  dual-core 
chip,  the  Pentium  Processor  Extreme  Edi¬ 
tion  840  running  at  3.2  GHz,  went  on  sale 
April  18.  These  initial  multicore  systems 
weren’t  aimed  at  the  business  market  but 
rather  at  computer  hobbyists  and  enter¬ 
tainment  enthusiasts.  They  offer  increased 
capabilities  for  audio,  high-definition  video 
and  3-D  visualization. 

According  to  an  Intel  spokesman,  the 
company  has  more  than  15  multicore  proj¬ 
ects  under  development  and  is  set  to  intro¬ 
duce  its  mainstream,  high-volume  dual¬ 
core  Pentium  D  processor  later  this  year. 
Incidentally,  these  multicore  CPUs  don't 
come  cheap:  the  Intel  Pentium  Processor 
Extreme  Edition  840  is  priced  at  $999  in 
1,000-unit  quantities. 

For  the  enterprise  market,  Intel  plans  to 
ship  a  dual-core  64-bit  Itanium  2  proces¬ 


sor,  code-named  Montecito,  built  using 
90nm  process  technology,  in  the  second 
half  of  2005.  The  next-generation  chip  will 
contain  more  than  1.7  billion  transistors 
and  a  24MB  cache. 

In  the  first  quarter  of  2006,  Intel  in¬ 
tends  to  deliver  two  optimized  64-bit  Xeon 
dual-core  processors. 

■  Advanced  Micro  Devices’  first  multicore 
releases,  the  Opteron  family,  feature  one 
die  with  two  CPU  cores.  Each  core  has 
separate  Level  1  and  L2  cache  hierarchies. 
The  two  CPU  cores  share  the  same  inte¬ 
grated  memory  controller  and  HyperTrans- 
port  technology  resources  that  AMD  has 
used  in  its  single-core  Opteron  processors. 

Dual-core  AMD  Opteron  processors  can 
be  inserted  into  existing  940-pin  sockets, 
provided  that  the  BIOS  is  updated.  Sunny¬ 


vale,  Calif.-based  AMD  announced  its  first 
dual-core  server  and  workstation  products 
on  April  21. 

Initial  reports  indicate  that  AMD’s  dual¬ 
core  processors  run  faster  than  Intel’s. 
Dual-core  client  processors  are  expected 
to  follow  in  the  second  half  of  this  year. 

■  Sun  Microsystems  has  been  talking  se¬ 
riously  about  multicore  processors  since 
2003.  Later  this  year,  Sun  is  expected  to 
ship  its  next-generation  UltraSparc  IV 
CPU.  Code-named  Niagara  and  designed 
for  network-intensive  tasks,  the  new  CPU 
could  put  as  many  as  eight  cores  onto  a 
single  chip  destined  for  blade  servers. 

Further  down  the  UltraSparc  road  map 
is  the  Rock  family,  which  will  be  tailored  to 
more  computational  tasks,  such  as  data¬ 
bases,  ERP  systems  and  encryption,  ac¬ 
cording  to  David  Yen,  executive  vice  presi¬ 
dent  of  Sun’s  scalable  systems  group. 

UltraSparc  is  primarily  used  in  servers, 
and  it  competes  with  IBM’s  Power  proces¬ 
sors  and  Intel’s  Itanium  and  Xeon  chips. 
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Sun  also  plans  to  market  systems  using 
AMD  Opteron  dual-core  CPUs. 

■  IBM’s  64-bit  Power5  CPU,  introduced 
last  year,  features  two  processor  cores 
with  separate  LI  (64KB  instruction,  32KB 
data)  cache  but  shared  onboard  L2 
(1.875MB)  and  off-chip  L3  (typically 
36MB)  caches.  These  are  used  primarily  in 
IBM’s  own  server  families  running  the  AIX, 
Unix  and  Linux  operating  systems. 

IBM  is  also  engaged  in  a  completely  sep¬ 
arate  multicore  processor  project,  the  Cell 
microprocessor,  with  Sony  Corp.  and 
Toshiba  Corp.  Designed  for  compute¬ 
intensive  workloads  and  broadband  rich- 
media  applications,  the  Cell  includes  a  64- 
bit  Power  processor  core  connected  to 
eight  synergistic  digital  signal  processing 
cores  capable  of  floating-point  processing. 
Cell’s  multicore  architecture  and  high¬ 
speed  communications  capabilities  are 
designed  to  support  multiple  operating 
systems  simultaneously. 

-Russell  Kay 
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SOJJTiWSE’S  CHRIS  tASTERWOOt  says 
that  If  software  vendors  consider  dual-core 
systems  as  two  processors,  “then  the  extra 
benefit  we  get  out  of  dual-core  goes  away.” 
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One  chip,  or  two?  How 
software  vendors  will 
charge  for  multicore 
chips  is  still  a  hot  debate. 

By  Patrick  Thibodeau 

IF  chris  easterwood,  IT  services  director  at 
Southwire  Co.,  installs  dual-core  chips  in  his 
servers,  he  may  get  an  unwelcome  surprise: 
a  license  fee  increase  from  his  database  soft¬ 
ware  vendor,  Oracle  Corp. 

For  pricing  purposes,  Oracle  is  counting  a  dual¬ 
core  chip  as  two  chips.  That  means  if  Easterwood 
puts  a  dual-core  chip  in  a  socket  previously  occu¬ 
pied  by  a  single-core  chip,  he  expects  that  his 
database  software  licensing  costs  will  roughly 
double.  As  a  result,  he’s  less  likely  to  adopt  the 
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new  technology,  he  says.  Although  Carrollton,  Ga.- 
based  Southwire  had  revenue  of  $2.2  billion  last  year, 
wire  manufacturing  isn’t  a  high-margin  business,  and 
IT  dollars  are  watched  carefully.  If  software  vendors 
consider  dual-core  systems  as  two  processors,  East- 
erwood  says,  “then  the  extra  benefit  we  get  out  of 
dual-core  goes  away.” 

In  fact,  some  industry  experts  expect  a  broadly 
negative  reaction  to  any  decision  by  software  ven¬ 
dors  to  charge  based  on  core. 

“Unless  software  companies  and  the  industry  in 
general  start  rethinking  the  whole  licensing  thing, 
they’re  going  to  be  in  trouble,  because  it’s  going  to  stop 
people  from  implementing  the  technology,”  says  John 
Abbott,  chief  analyst  at  The  451  Group  in  New  York. 

But  despite  user  concerns,  software  licensing  is¬ 
sues  haven’t  slowed  down  the  chip  vendors.  Intel 
Corp.  and  Advanced  Micro  Devices  Inc.  expect  to  in¬ 
stall  dual-core  technology  in  more  than  two-thirds  of 
the  servers  shipped  by  the  end  of  next  year.  In  time, 
nearly  all  servers  will  have  multicore  chips. 

“The  industry  is  going  to  have  to  cope  with  multi¬ 
ple-core  processors  as  being  the  standard,”  says 
Graham  Lovell,  senior  director  of  x86  servers  at  Sun 
Microsystems  Inc.,  which  produces  servers  based 
on  AMD’s  Opteron  chips. 

Continued  on  page  54 


At  the  Bargaining  Table 


IT  PAYS  TO  BE  BIG.  That’s  one  advantage  for 
United  Parcel  Service  Inc.  when  dealing  with 
software  vendors. 

“When  we  are  looking  at  new  technologies,  we 
don’t  get  hung  up  on  licensing  aspects,”  says  John 
Nallin,  vice  president  of  information  services  at  the 
Atlanta-based  delivery  company. 

The  first  question  is  whether  a  technology  realisti¬ 
cally  provides  a  benefit  to  UPS,  says  Nallin,  whose  IT 
department  has  an  advanced  technology  group  that 
investigates  new  products  as  early  as  two  years  be¬ 
fore  their  release.  UPS  is  now  evaluating  dual-core 
chips  from  Intel  and  AMD. 

Nallin  says  reaching  a  deal  with  software  vendors 
regarding  use  of  dual-core  is  a  matter  of  negotiation. 
“I  don’t  remember  going  to  a  vendor  who  was  pro¬ 
moting  a  new  product  and  having  the  vendor  tell  me 
that  they  are  not  going  to  adjust  whatever  the  obsta¬ 


cle  is  to  make  both  of  us  successful,”  he  says. 

Tacoma,  Wash.-based  Auto  Warehousing  Co., 
North  America’s  largest  automobile  processing 
company,  isn’t  small  either,  but  CIO  Dale  N.  Frantz 
says  his  neighbor,  Microsoft  Corp.,  can  be  a  tough 
customer  on  licensing  issues. 

Frantz  says  he’s  considering  adding  Microsoft’s 
BizTalk  Server  on  a  four-way  server.  But  the  vendor 
wants  $40,000  per  processor,  or  $160,000  total, 
he  says,  and  “that’s  a  problem."  Frantz  will  put  off 
installation  of  BizTalk  and  see  if  Microsoft  changes 
its  licensing  approach. 

Frantz  says  the  problem  with  licensing  reaches 
well  beyond  Microsoft.  “I  think  the  software  industry 
is  going  to  have  to  adapt  to  these  new  technol¬ 
ogies,"  he  says.  “They  just  can’t  continue  to  stack 
up  the  cost.” 

-  Patrick  Thibodeau 
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Are  Platform  Changes  Ahead? 


REGARDLESS  OF  THE  LICENSING  SCHEMES  that 
software  vendors  adopt,  chip  makers  report  that  by  the 
end  of  next  year,  the  vast  majority  of  servers  sold  will 
include  dual-core  chips. 

But  while  dual-core  technology  could  soon  dominate 
the  server  market,  users  aren’t  likely  to  rush  out  and  pur¬ 
chase  dual-core  chips  for  the  performance  gain,  says 
John  Humphreys,  an  analyst  at  market  research  firm  IDC. 
“It  doesn’t  seem  like  most  users  are  capacity-constrained, 
so  there’s  not  a  lot  of  need  to  add  capacity  quickly,”  he 
says.  Humphreys  says  the  dual-core  adoption  pattern 
among  most  users  will  be  similar  to  transitions  to  chips 
with  higher  clock  speeds,  like  a  move  from  1 6Hz  to 
3  GHz,  for  instance. 

Both  Intel  and  Advanced  Micro  Devices  expect  that 
greater  than  85%  of  the  servers  shipped  by  the  end  of 
2006  will  have  dual-core  chips. 

Officials  at  AMD  and  Intel  say  market  pressure  in  the 
form  of  decisions  by  big  software  vendors  such  as  Micro¬ 
soft  to  treat  dual-core  as  one  chip,  as  well  as  customer 
demands,  will  ultimately  drive  vendors  to  treat  dual-core 
chips  as  a  single  chip. 

“Fundamentally,  dual-core  isn’t  necessarily  replacing  a 
platform  that  may  have  had  two  discrete  processors  earli¬ 
er;  dual-core  is  the  evolution,”  says  Jeff  Austin,  desktop 
product  marketing  manager  at  Intel  in  Austin. 

However,  the  unknown  question,  says  Humphreys,  is 


whether  software  licensing  terms  on  dual-core  chips  will 
prompt  some  users  to  move  to  applications  that  count  a 
dual-core  as  one  chip,  not  two. 

That’s  what  rivals  of  Oracle  and  other  software  vendors 
hope  will  happen. 

For  example,  Zack  Urlocker,  vice  president  of  marketing 
at  open-source  database  services  company  MySQL  AB  in 
Uppsala,  Sweden,  says  dual-core  “will  hasten  people’s 
evaluation  of  open-source  software”  because  anytime 
there  is  a  shift  in  architecture,  users  tend  to  look  at  their 
software  and  infrastructure  at  the  same  time. 

But  in  those  cases  where  software  vendors  count  dual¬ 
core  as  one  chip,  the  licensing  cost  may  be  offset  in  other 
ways.  For  instance,  if  a  company  consolidates  applica¬ 
tions  onto  a  larger  server  that  is  running  dual-core  chips 
and  improves  processor  utilization,  it  may  also  be  able  to 
cut  administration  and  hardware  costs. 

Joanne  Kossuth,  CIO  at  Franklin  W.  Olin  College  of  En¬ 
gineering  in  Needham,  Mass.,  says  licensing  ultimately 
does  have  an  effect  on  the  college’s  product  purchases. 
But  for  now,  she  sees  a  disconnect  between  the  hardware 
and  software  vendors  in  the  way  they  sell  their  products. 

At  some  point,  Kossuth  says,  these  vendors  “will  have 
to  come  up  with  some  sort  of  solution”  so  that  licensing  by 
a  software  vendors  “does  not  negatively  impact  the  sale  of 
new  technologies.” 

-  Patrick  Thibodeau 


But  while  all  servers  might  soon  have  dual  cores, 
software  licensing  will  be  far  from  uniform.  Indeed, 
three  of  the  biggest  software  vendors  seem  to  be  tak¬ 
ing  different  approaches.  IBM  will  make  licensing 
decisions  on  a  case-by-case  basis,  Oracle  will  count  a 
dual-core  chip  as  two  chips,  and  Microsoft  Corp.  in¬ 
tends  to  treat  a  dual-core  chip  as  a  single  chip. 

IBM  has  told  Power5  dual-core  customers  that  those 
processors  will  be  counted  as  two  chips  because  users 
are  getting  “full  benefit”  of  the  processors  —  in  other 
words,  performance  two  times  that  of  a  single  core. 

In  response  to  an  e-mail  question,  IBM  said  it  can  do 
this  because  the  Power5  is  in  its  third  generation  of 
dual-core  technology.  But  installing  a  single  dual¬ 
core  x86  chip  isn’t  the  same  as  putting  in  two  chips. 

Chip  vendors  say  dual-core  users  can  expect  per¬ 
formance  gains  of  about  1.3  to  1.8  times  that  of  one 
CPU,  largely  depending  on  the  application  that’s 
running.  Because  of  that,  IBM  considers  the  dual¬ 
core  x86  chips  as  a  single  processor  for  software  li¬ 
censing.  But  as  the  chips  improve,  IBM  might  alter  its 
plan  and  count  dual-core  as  two  chips.  An  IBM 
spokesman  says  the  company  will  “constantly  evalu¬ 
ate”  its  licensing  approach  based  on  customers’ 
reported  chip  performance. 

Oracle’s  licensing  policy  is  similar  to  IBM’s  for 
its  Power5  dual-core  processors.  The  company  says 
that  as  the  dual-core  x86  processors  advance,  they 
will  offer  performance  equal  or  better  than  two 
separate  chips. 

That’s  in  part  why  Oracle  views  dual  cores  as  two 
processors  for  licensing,  says  Jacqueline  Woods,  vice 
president  of  global  licensing  and  pricing  strategy.  In 
making  her  point,  Woods  cites  IBM’s  approach  for 
software  licensing  on  the  Power5  chip.  While  dual¬ 
core  might  not  deliver  two  times  the  performance  to¬ 
day,  she  says,  it  will  likely  offer  performance  gains  of 
double  or  more.  “As  the  performance  on  those  chips 
does  improve,  our  pricing  will  stay  the  same  because 
we  are  agnostic  in  that  area,”  Woods  says. 

Several  years  ago,  Oracle  tried  pricing  based  on 
performance,  with  its  universal  power  unit.  But  as 
chip  megahertz  increased  by  leaps,  so  did  software 
licensing  prices,  prompting  some  user  complaints. 
Oracle  dropped  the  power-unit  idea,  focusing  instead 
on  per-CPU  pricing. 

Woods  says  the  company  is  unlikely  to  return  to  a 
license  formula  based  on  chip  performance.  Oracle’s 
licensing  prices  don’t  necessarily  double,  even  if  the 
cores  do,  she  says,  and  the  company  offers  discounts 
as  the  number  of  chips  increase,  in  addition  to  other 
license  plans  that  are  based,  for  instance,  on  numbers 
of  users. 

Paying  for  Power 

But  for  users  who  pay  based  on  CPU  usage,  dual-core 
is  just  the  beginning.  Chips  with  four  or  more  cores 
based  on  the  x86  architecture,  as  well  as  in  RISC- 
based  systems,  will  be  arriving  as  early  as  next  year 
(see  “Future  Chips,”  page  50).  Indeed,  multicore 
chips  can  get  very  large.  For  example,  a  network- 
attached  computing  appliance  recently  developed 
by  Azul  Systems  Inc.  has  24  cores  per  chip. 

Yuri  Aguiar,  senior  partner  and  chief  technology 
officer  at  New  York-based  Ogilvy  &  Mather  World¬ 
wide  Inc.,  is  testing  the  Azul  systems.  He  says  licens¬ 
ing  models  will  have  to  adapt  to  new  technologies, 


lest  software  vendors  risk  defections  to  open-source 
platforms  such  as  MySQL  or  PostgreSQL  databases. 

“Even  if  the  uptake  is  slow  in  the  beginning,  many 
of  these  databases  are  proven  and  will  be  adopted  by 
more  people  than  we  expect  if  licensing  terms  don’t 
change  quickly,”  says  Aguiar. 

Users  such  as  John  R.  Dick,  CIO  and  executive  vice 
president  at  Birmingham,  Ala.-based  Regions  Finan¬ 
cial  Corp.,  want  the  increased  power  of  dual-core 
chips  without  having  to  pay  what  they  consider  a 
software  pricing  penalty. 

Dick  sees  dual-core  chips  as  a  “scalability  option” 
for  his  firm  —  a  way  to  increase  performance.  He 
says  he  isn’t  likely  to  take  a  two-processor  server  and 
replace  it  with  one  running  a  single  dual-core  to  cut 
his  software  licensing  charges.  He  simply  wants  the 
performance  gain.  “The  pricing  proposition  vis-a-vis 
other  alternatives  in  the  market  would,  over  time, 
drive  you  to  a  different  product,”  he  says. 

The  reality  is  that  any  licensing  change  by  the  ven¬ 
dors  will  have  a  negative  impact  for  some  IT  group 
somewhere. 

In  the  case  of  virtualization,  per-CPU  pricing  “works 
to  our  benefit  if  we  are  able  to  deploy  several  system 
images  on  a  CPU,”  says  Madge  Meyer,  executive  vice 
president  and  head  of  global  IT  infrastructure  ser¬ 
vices  at  financial  services  firm  State  Street  Corp.  in 
Boston.  Dual-core  chips  may  “create  a  negative  impact 
on  the  cost  of  licensing  if  the  software  vendors  decide 
to  treat  a  dual-core  CPU  as  two  CPUs,  and  they  will 
probably  build  a  strong  case  for  doing  so,”  she  says. 

It  could  mean  having  to  move  away  from  counting 
physical  CPUs  to  pricing  based  on  the  number  of 
times  a  separate  application  is  running  on  the  chip. 


Such  a  move  would  provide  software  vendors  with 
some  additional  revenue  “but  will  likely  not  take 
away  all  of  the  benefits  of  virtualization  so  as  not  to 
kill  the  golden  goose,”  says  Meyer. 

What’s  Next 

It  remains  to  be  seen  whether  multicore  chips  will 
fundamentally  change  how  users  pay  for  software. 
Some  believe  that  software  vendors  may  have  to 
move  toward  an  open-source  pricing  model,  earning 
revenue  from  maintenance  and  support  and  not  from 
per-CPU  pricing. 

Randy  Roth,  a  partner  at  Corporate  Contracts  LLC, 
a  consulting  and  contract  negotiation  firm  in  Urban- 
dale,  Iowa,  says  software  pricing  is  making  users 
think  harder  about  what  they’re  spending.  “We  have 
been  seeing  more  companies  willing  to  limit  the 
amount  of  software  that  they  will  license,  because  of 
the  difference  in  the  perceived  value  in  what  they  get 
out  of  the  software  and  the  increasing  cost  of  run¬ 
ning  that  software.” 

The  per-CPU  pricing  model  was  adopted  for  its 
simplicity,  but  virtualization  and  multicore  technology 
change  that,  says  David  Znidarsic,  vice  president  of 
technology  at  Santa  Clara,  Calif.-based  Macrovision 
Corp.,  which  makes  licensing  management  systems. 

He  says  few  software  applications  can  deliver 
“linearly  increased  performance”  as  CPU  capabilities 
increase.  The  result,  says  Znidarsic,  will  be  increas¬ 
ing  tension  between  “the  end  users  who  are  wanting 
proportional  value  of  the  price  increases  and  the 
software  publishers  who  are  challenging  their  engi¬ 
neering  departments  to  deliver  proportional  value  to 
the  number  of  CPUs.”  ©  54560 


Introducing  Application  Optimized  Storage. 

Other  storage  companies  will  go  on  and  on  about  their  storage  products,  and 
not  much  else.  But  at  Hitachi  Data  Systems,  we  understand  that  it's  not  about  us, 
it's  about  you. 

We  know  your  business  runs  on  applications — strategic  applications  that  are 
critical  to  your  growth.  Therefore  we've  taken  a  strategic  approach  to  stor- 
hated  on  how  aoDlications  use  data.  We  call  them  Application  Optimized 


management,  data  replication,  and  data  movement  across  heterogeneous, 
tiered  storage  systems. 

. 

Ali  told.  Application  Optimized  Storage  solutions  mean  efficiency  and  lower  costs. 
IT  runs  better.  And  ultimately,  your  business  runs  better.  It's  ali  part  of  our  com¬ 
mitment  to  being  your  Partner  Beyond  Technology, 

We’d  like  to  talk  to  you  about  your  business,  applications,  and  storage  needs 

To  learn  more  about  Application  Optimized  ^ 

Storage  solutions  and  download  a  free  |“§  |  II 

white  paper,  visit  us  at  www.hds.com/talk  DATA  SYSTEMS 
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to  offer  tool  sets  that  help  you 
optimize  your  code  for  multi¬ 
core,  as  well  as  prewritten 
code  modules  that  remove  the 
burden  entirely.  Vendors,  like 
enterprise  developers,  will  also 
hone  their  ability  to  write  applications  that  take  ad¬ 
vantage  of  multicore’s  inherent  advantages. 

While  IT  professionals  experienced  with  servers 
won’t  see  a  major  difference  between  multiprocessor 
and  multicore  work,  those  whose  experience  is  limited 
to  the  desktop  —  where  multiprocessing  is  an  alien  con¬ 
cept  —  will  have  to  adapt.  “As  dual-core  gets  out,  it’ll  be 
the  first  time  multiprocessing  ever  hits  the  mass  mar¬ 
ket,”  says  Alan  Zeichick,  a  multicore  development  ex¬ 
pert  and  principal  analyst  at  Camden  Associates  in  San 
Bruno,  Calif.  “People  who  have  always  developed  for 
desktops  . . .  will  need  to  learn  to  write  threaded  apps.” 

Enterprise  developers  may  also  find  new  chal¬ 
lenges  in  partitioning  applications.  “C  and  C++  are  se¬ 
quential  languages  with  no  concept  of  running  in  par¬ 
allel,”  says  Sven  Brehmer,  CEO  of  PolyCore  Software 
Inc.,  a  Foster  City,  Calif. -based  vendor  of  multicore 
development  tools.  To  partition  an  application  writ¬ 
ten  in  these  languages,  you  must  break  the  applica¬ 
tion  apart,  then  run  some  portions  of  it  on  one  proc¬ 
essor  and  other  portions  on  another.  “When  you  take 
these  parts  and  move  them,  you  need  to  make  sure 
you  don’t  destroy  variables  or  the  way  data  flows 
from  the  source  to  the  destination,”  Brehmer  says. 


Turf  Battles? 

Because  multicore  chips  place  two  or  more  indepen¬ 
dent  CPUs  on  a  single  silicon  die,  some  wonder  if 
their  Achilles’  heel  will  be  data  movement  to  and 
from  those  CPUs. 

“There  have  been  some  performance  bottlenecks 
when  [multicore-equipped  systems  are]  running 
different  applications  that  are  both  fighting  for  the 
same  I/O  path,”  says  Zeichick.  But  he  stresses  that 
to  date,  these  bottlenecks  have  been  minor. 

Concern  over  data  bottlenecks  is  natural  because 
the  issue  often  arises  in  today’s  multiprocessing 
servers.  “Anytime  you  have  multiple  processors, 
you’ve  got  to  move  data  around  the  system,  and  that 
requires  close  attention,”  says  Brehmer.  “Most  sys¬ 
tems  today  have  shared  memory  and  a  bus.  That’s 
simple  but  limited  —  you  have  bus  contention.” 
Brehmer  predicts  that  as  multicore  evolves,  alterna¬ 
tives  to  simple  buses  will  arise:  direct  links,  multilevel 
buses,  “even  connection  fabrics  inside  the  chip.” 

While  advanced  bus  alternatives  may  be  a  boon  in 
the  future,  experts  say  that  in  the  near  term,  the  key 
to  multicore  development  is  the  same  as  in  any  multi¬ 
processor  system:  careful  development  of  multi¬ 
threaded  applications  (that  is,  programs  whose  vari¬ 
ous  portions  can  run  simultaneously)  so  that  threads 
don’t  interfere  with  one  another.  Multithreading  is 
also  the  secret  to  multicore’s  potential  speed  benefits. 


In  the  new  world  of  multicore, 
IT  must  overcome  challenges 
in  desktop  software  and 
partitioning.  By  Steve  Ulfelder 


or  vendors  and  end  users  alike,  the 
ascent  of  multicore  processors  is  as 
beneficial  as  it  is  inevitable.  Vendors 
(of  chips,  hardware,  software,  network¬ 
ing  gear  —  the  works)  will  get  to  roll 
out  products  with  a  high  buzz  factor, 
while  users  will  revel  in  the  seemingly 
ceaseless  Moore’s  Law  march:  ever- 
cheaper,  ever-faster,  ever-better  computing. 

Stuck  in  the  middle  are  IT  professionals,  who  must 
make  it  all  work. 

The  writing  is  on  the  wall:  Multicore  chips  will 
soon  dominate  the  technology  landscape.  The  good 
news  is  that  for  now,  developing  software  for  multi¬ 
core  processors  differs  little  from  developing  for  the 
multiprocessing  systems  with  multiple  chips  in  com¬ 
mon  use.  Boosting  performance  by  adding  chips  to 
achieve  symmetric  multiprocessing  is  an  old  IT 
standby,  particularly  in  database  servers,  heavy  num¬ 
ber-crunching  and  other  data-intensive  applications. 

In  addition,  as  multicore  evolves,  look  for  vendors 


SKILLS 


Beyond  the  Black  Box 

So,  what  do  you  do  now  to  make 
sure  you're  in  the  catbird  seat 
when  multicore  technology  really 
hits  the  corporate  computing  landscape?  Experts  say 
the  best  advice  is  to  nurture  all  the  skills  needed  to 
thrive  in  any  multiprocessor  environment  -  in  particu¬ 
lar,  the  ability  to  write  multithreaded  applications. 

In  addition,  a  set  of  tools,  best  practices  and  even  op¬ 
timized  code  is  evolving.  Today,  most  of  these  resources 
are  used  by  PC  software  developers  at  vendors  seeking 
to  update  packaged  applications  for  multicore.  However, 
the  resources  will  soon  filter  out  to  all  developers. 

For  an  example  of  the  multicore  tools  coming  on¬ 
line,  look  at  Intel  Corp.,  which  is  naturally  eager  to  help 
developers  at  packaged-application  vendors.  The 
company  has  launched  a  program  dubbed  Threading 
Enabling  that  offers  the  following  pieces: 

■  A  performance  analyzer  that  lets  developers  study 
code  to  find  areas  in  which  data  flow  can  be  optimized. 

■  A  library  of  already  optimized  code  for  common 
functions  and  subroutines.  “This  lets  developers  pull 
functions  and  thus  skip  coding  and  optimizing  them 
altogether,”  says  Jeff  Austin,  desktop  product  market¬ 
ing  manager  at  Intel. 

■  Compilers  created  specifically  for  multicore  code. 

■  A  tool  called  Thread  Checker  that  finds  potential 
conflicts  among  thread  interactions. 

Many  believe  that  the  growth  of  multicore  chips  will 
force  IT  professionals  at  all  levels  to  sharpen  their 
skills,  if  only  by  pushing  multiprocessing  deeper  into  the 
computing  consciousness.  “We  need  better  program¬ 
ming  education  in  general,"  says  Russ  Miller,  director 
of  the  Center  for  Computational  Research  at  the 
University  at  Buffalo  in  New  York.  “Much  of  today’s 
programming  is  done  in  black-box  style.” 

Carnegie  Mellon  professor  Babak  Falsafi  agrees. 
“We’re  going  to  see  a  paradigm  change  where  we  teach 
concurrency  from  the  very  beginning,”  he  says.  Falsafi 
adds  that  this  will  be  a  gradual  shift  that  could  take 
more  than  a  decade.  But  eventually,  he  says,  multicore 
processing  will  drive  “a  paradigm  shift  that  will  ensure 
multithreading  and  concurrent  as  basic  skills.” 

-  Steve  Ulfelder 


“Most  IT-grade  software  today  is  multithreaded,  so 
IT  people  are  accustomed  to  it,”  says  Babak  Falsafi,  an 
associate  professor  at  Carnegie  Mellon  University’s 
Computer  Architecture  Laboratory  in  Pittsburgh. 

Virtually  all  modern  applications  have  at  least 
some  multithreading;  the  ones  that  don’t  tend  to  be 
ancient  batch-processing  applications  such  as  home¬ 
grown  payroll-processing  systems. 

While  skeptics  say  multicore  may  be  a  bigger  boon 
for  the  PlayStation  generation  than  for  IT,  most  en¬ 
terprise  software  will  see  improved  performance  as 
the  technology  matures.  “Early  on,  we’ve  seen  some 
minor  performance  bottlenecks  when  running  differ¬ 
ent  apps  trying  to  share  the  same  I/O  path,”  Zeichick 
says.  “But  those  will  be  overcome.  The  simple  truth 
is,  this  is  the  future.”  P  54320 


Ulfelder  is  a  Computerworld  contributing  writer. 
Contact  him  atsteve@ulfelder.com. 
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Virtual  Effects 

Are  server  sales  slowing? 

A  survey  of  100  CIOs  by  New  York-based 
Merrill  Lynch  &  Co.  shows  there’s  no  sign 
of  that  -  yet.  But  analyst  Steven  Milunovich 
says  virtualization  may  change  that 
by  temporarily  reducing  demand 
for  new  servers. 


Is  your  spending  on 
servers  accelerating,  slowing 
or  staying  the  same? 


53% 

Staying 
the  same 


34% 

Accelerating 


13% 

Slowing 


W 


As  yirtualization  is  more  widely 
used,  do  you  think  it  will  slow 
server  spending  until  utilization 
rates  are  higher? 


Base:  100  CIOs  (75  in  the  U.S.,  25  in  Europe) 


8GB  in  a  Square  Inch 

Hitachi  Global  Storage  Technology 
Inc.  in  San  Jose  is  planning  to  launch 
an  8GB  version  of  its  Microdrive  1-in. 
hard  disk  drive  in  the  fourth  quarter  of 
this  year,  says  David  Chen,  a  field  ap¬ 
plication  engineer  at  the  company’s 
Taiwan  branch.  The  Microdrives  are 
used  in  cellular  phones,  PDAs  and 
other  handheld  devices. 

—  Martyn  Williams, 
IDG  News  Service 

•  •••••••••••••••••••••••••A 

Tired  of  Waiting  for 
Windows  Boot-up? 

Taiwanese  hardware  maker  Giga-byte 
Technology  Co.  has  stumbled  upon  a 
faster  way  to  boot  up  PCs  based  on  Mi¬ 
crosoft  Corp.’s  Windows  XP  operating 
system. 

Giga-byte’s  iRam  is  a  PC  add-in  card 


with  four  DDR  DRAM  (double  data 
rate  dynamic  RAM)  slots  that’s  de¬ 
signed  to  be  used  as  a  PC  drive. 

Because  the  iRam  uses  DRAM 
rather  than  a  hard  disk  to  store  infor¬ 
mation,  data  can  be  retrieved  from 
the  drive  up  to  60  times  faster  than  is 
possible  with  a  hard  drive,  according 
to  Giga-byte,  which  showed  the  board 
at  the  Computex  exhibition  in  Taipei 
this  month. 

The  iRam  was  originally  designed 
for  video  and  editing  applications 
whose  users  require  fast  access  to  very 
large  files,  but  Giga-byte  soon  realized 
that  the  product  had  other  potential 
applications,  says  company  spokesman 
Tim  Handley.  For  example,  users  can 
install  Windows  on  the  iRam  and  use 
it  as  the  drive  for  starting  the  system, 
Handley  says.  When  the  card  is  used  in 
this  way,  starting  Windows  XP  takes  a 
matter  of  seconds,  rather  than  a  minute 


Three  Questions 

What  percentage  of  your 
server  purchases  are  blades  today? 


AVERAGE: 


11% 


What  will  the  percentage 
be  in  three  years? 


AVERAGE: 


35% 


From  which  vendors 
do  you  buy  blades? 

I  IBM 
ewlett- 
’  Dell  Inc. 


BASE:  100.  CIOs  (75  in  the  U.S„  25  ifi  Europe) 

SOURCE;  MERRILL  LYNCH  &  CO.,  NEW  YORK,  JUNE  2005 


or  more,  according  to  Handley. 

The  iRam  holds  up  to  4GB  of  DRAM 
in  four  memory  slots.  The  card  fits  into 
a  standard  PCI  slot,  which  provides 
power,  and  it  uses  a  Serial  ATA  connec¬ 
tion  for  data  transfer.  The  iRam  will  be 
available  next  month  and  will  be  priced 
at  around  $60  without  DRAM. 

—  Sumner  Lemon, 
IDG  News  Service 

MORE  RESOURCES 

Our  Hardware  Knowledge  Center  has  more  news, 
opinions  and  resources  -  and  a  new  blog: 

OQuickLink  k2200 

www.computerworld.com 


U.S.  Congressional  Group 
Eyes  E-waste  Disposal  Laws 

FOUR  MEMBERS  OF  THE  U.S.  HOUSE  OF 
REPRESENTATIVES  have  created  the  Con¬ 
gressional  E-Waste  Working  Group  to  work 
on  standardizing  national  laws  for  the  recy¬ 
cling  and  disposal  of  discarded  electronic 
and  computer  equipment. 

The  bipartisan  working  group  will  explore 
potential  solutions  to  the  growing  electronic 
waste  problem  and  educate  members  of 
Congress  about  its  consequences.  More  than 
50  million  computers  are  disposed  of  each 
year,  according  to  the  working  group,  and  the 
machines  contain  harmful  elements,  such  as 
lead,  cadmium  and  mercury,  that  can  leach 
into  the  environment  if  not  disposed  of  prop¬ 
erly  [QuickLink  43804], 

“E-waste  is  a  national  problem  that  needs 
a  national  solution,”  Rep.  Louise  Slaughter 


(D-N.Y.)  said  in  a  statement.  “Since  the  year 
2000,  we’ve  increased  the  number  of  elec¬ 
tronics  entering  the  waste  stream  by  at  least 
10  million  units.  As  we  continue  to  dispose  of 
more  and  more  units  each  year,  finding  a  na¬ 
tional  disposal  approach  becomes  more  and 
more  critical.  We  can  no  longer  afford  to  ig¬ 
nore  this  growing  problem.” 


Joining  Slaughter  were  Reps.  Mike 
Thompson  (D-Calif.),  Randy  “Duke”  Cun¬ 
ningham  (R-Calif.)  and  Mary  Bono  (R-Calif.). 
The  working  group  hopes  to  hold  a  congres¬ 
sional  hearing  on  the  issue  this  summer. 

Two  states,  California  and  Maine,  already 
have  e-waste  laws,  and  Maryland  recently 
joined  them  in  the  cleanup  effort,  according 
to  the  working  group.  Another  24  states  are 
considering  their  own  laws.  But  that  creates  a 
problem  for  computer  and  electronics  mak¬ 
ers,  retailers  and  others,  because  they  will 
face  different  disposal  laws  in  different 
states,  the  working  group  said.  Instead, 
standardized  regulations  are  needed  to 
create  uniform  disposal  procedures  across 
the  country. 

Manufacturers  have  tried  to  create  stan¬ 
dards  in  the  past  but  have  been  split  on  how 
best  to  devise  such  a  program.  ©  54894 
-  Todd  R.  Weiss 
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For  multi-vendor,  cross -platform  service  and  support,  Fujitsu  is  the  one . 


From  mainframes  to  servers,  notebooks, 
and  Tablet  PCs,  no  other  company  provides 
the  full  spectrum  of  services  to  support 
business-critical  computing  like  Fujitsu.  In 
addition  to  our  own  products,  we  support 
a  variety  of  platforms  such  as  Sun",  IBM®, 
and  HR  plus  OS/390®,  UNIX®,  Windows® 
and  Linux  environments.  We  also  provide 
services  that  improve  the  operation 
of  your  existing  IT  investments  and 
drive  down  costs.  So,  if  it’s 
critically  important  to  a  CIO's  IT 
infrastructure,  we  service  it 
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PRIMEPOWER*  Servers  PRIM  ERG  Y®  Servers 


LifeBook®  Notebooks  PRIMEQUEST  Servers 


With  more  than  30  years  of  direct 
experience  collaborating  with  our  customers 
and  aligning  their  IT  and  business  objectives, 
we've  learned  what  it  takes  to  maintain  a 
wide  variety  of  complex,  mission-critical  IT 
environments — and  deliver  a  higher  level  of 
service,  for  multi-vendor,  cross-platform 
environments.  We  provide  a  single  point  of 
contact  and  full  accountability  to 
reduce  the  complexity  and  cost  of 
support,  streamlining  operations  to 
offer  greater  business  value. 


To  learn  more  reasons  why  CIOs  entrust  their  IT  systems  to  Fujitsu,  visit 

us.fujitsu.com/computers/services  or  call  I  -800-83 1  -3 1 83. 


FUJITSU 


THE  POSSIBILITIES  ARE  INFINITE 


.  PRIMFPOWER.  PRIMEOUEST  and  LifeBook  are  registered  trademarks  or  trademarks  of  Fujitsu  Limned  in  the  United  States  and  other  countries.  PMMERG1  is  a  registered  trademark  of 
©2005  Fujitsu  Computer  Systems  Corporation.  All  rights  reserved.  Fujitsu, 1 the :  Fu,t  u  o(  IBM  Corporation  in  the  Unfed  States,  other  countries,  or  both.  Sun  ,s  a  trademark  of  Sun  Microsystems.  Inn.  ,n  the  US.  and  other  countries 

Fumsu  Corporation.  Al,  other  trademarks  mentioned  herein  are  the  proper*  of  them , respective  owners. 


SNAPSHOTS 


Server  Spending  Up 

Increased  spending  in  Asia-Pacific  helped 
drive  revenue  for  the  top  five  vendors. 

2004  server  revenue,  compared  with  2003: 


1 

IBM:  $16.3  billion  (up  10.3%) 

2 

Hewlett-Packard  Co.: 

$13.0  billion  (up  4.4%) 

3 

!  •  .  _  '  r  *  •» 

Sun  Microsystems  Inc.: 

$5.1  billion  (down  3.9%) 

4 

Dell  Inc.:  $4.6  billion  (up  11.4%) 

5 

Fujitsu/Fujitsu  Siemens  Computers: 
$2.8  billion  (up  2.2%) 

SOURCE:  IDC.  FRAMINGHAM.  MASS..  FEBRUARY  2005 


PCs  on  the  Rise 

Continued  strength  in  Europe,  the  Middle 
East  and  Africa  helped  spur  growth. 

First-quarter  2005  PC  shipments, 
compared  with  first  quarter  2004: 


_1_ 

Dell:  8.7  million  (up  13.6%) 

2 

Hewlett-Packard: 

7.1  million  (up  10.6%) 

¥ 

IBM:  2.3  million  (up  2%) 

B 

Fujitsu/Fujitsu  Siemens: 

2.1  million  (up  14.8%) 

5 

Acer  Inc.:  1.8  million  (up  34.1%) 

SOURCE:  IDC.  APRIL  2005 

Handhelds  Dip  Again 

2004  was  the  third  straight  year  of 
decline  since  the  market’s  peak  in  2001. 

2004  shipments  of  handheld  devices, 
compared  with  2003: 


PalmOne  Inc.:  3,645,399  (down  9.6%) 

2 

Hewlett-Packard: 

2,492,539  (up  9%) 

3 

Dell:  695,171  (up  18.9%) 

Uni  Sony  Corp.: 

fU!  418,832  (down  70.1%) 

5 

|  Medion  A6:  234,325  (up  18%) 

SOURCE:  IDC,  FEBRUARY  2005 


MARK  HALL 


Hardwares 
Cool  Again 

few  years  ago,  when  your  users  complained  about  sluggish  response  times 
from  an  application,  the  solution  was  easy:  Upgrade  the  machine  that  ran  the 
software  and  watch  it  fly.  Not  so  these  days.  N-tier  applications  are  running 
on  multiple  Web,  database  and  application  servers,  interacting  with  legacy 
back-end  systems  while  pushing  asynchronous  packets  across  multiple  LAN 


segments  and  even  across  the  Internet.  With  all  that 
happening,  you  can  never  assume  that  a  server’s  aging 
processor  is  to  blame  for  pokey  performance.  In  fact, 
it’s  highly  unlikely  that  a  computer’s  CPU  is  your  bot¬ 
tleneck.  Microprocessor  performance  has  improved  so 
much,  especially  in  the  past  Five  years,  that  it’s  increas¬ 
ingly  difficult  to  rationalize  steady  hardware  upgrades 
just  to  run  something  a  wee  bit  faster.  Most  4-  and 
even  5-year-old  servers  seem  to  handle  their  applica¬ 
tion  loads  just  fine. 

The  serious  performance  problems  in  your  production 
systems  are  elsewhere  these  days.  Undoubtedly  they’ll 
be  software  flaws  or  network  gridlock,  neither  of 
which  would  be  fixed  with  a  faster  box.  So  why  bother? 

Well,  starting  this  year,  getting  new 
hardware  for  hardware’s  sake  in  many  situ¬ 
ations  will  begin  to  make  sense  all  over 
again.  That’s  because  next-generation 
servers  using  AMD’s  dual-core  Opteron 
chips  are  becoming  available  from  the 
likes  of  Hewlett-Packard,  IBM  and  Sun 
Microsystems.  And  next  year,  Intel  and 
its  vast  army  of  reseller  partners  will  be 
touting  computers  based  on  its  dual-core 
microprocessors. 

There’s  been  a  lot  of  finger-pointing  in 
the  press  lately  that  Intel  failed  in  its  bid 
to  counter  AMD’s  Opteron.  It’s  true.  AMD 
beat  the  world’s  biggest  semiconductor 
maker  to  market  with  dual-core  systems.  But  I  think 
any  market-share  advantage  AMD  has  today  on  that 
front  will  fade  when  the  Intel  juggernaut  hits  its  stride 
by  year’s  end. 

Needless  to  say,  you’ll  benefit  from  less  expensive 
and  more  powerful  computers  as  both  companies  fight 
to  get  bragging  rights  for  the  cheapest,  fastest,  best 
dual-core  technology.  There’s  no  downside  for  IT  here. 

Dual-core  technology  promises  to  give  data  center 
managers  distinct  advantages  in  performance,  manage¬ 
ment  and  operating  costs  that  can’t  be  ignored.  Each 
dual-core  microprocessor  packs  two  CPUs  on  a  single 
die.  They  communicate  with  each  other  over  a  high¬ 
speed  fabric.  Multicore  systems  will  probably  appear  by 
the  end  of  the  decade.  These  will  have  four,  eight  and 
even  more  CPUs  all  packaged  together  as  a  single  chip. 


You  can  imagine  how  fast  these  machines  will  per¬ 
form.  But  if  you’re  running  applications  tuned  by  de¬ 
velopers  to  use  threads  for  parallel  processing  envi¬ 
ronments,  you  will  get  exceptional  performance 
because  dual-core  systems  can  leverage  software 
designed  for  parallel  processing. 

Another  improvement  in  the  dual-core  systems  will 
be  vastly  improved  thermals.  According  to  The  Uptime 
Institute  (TUI)  in  Santa  Fe,  N.M.,  servers  and  other 
data  center  equipment  have  been  power  hogs,  increas¬ 
ing  their  watts  per  square  meter  of  data  center  space 
at  a  rate  of  15%  or  more  each  year  since  1992.  TUI  esti¬ 
mates  that  the  new  technologies  being  delivered  by 
AMD  and  Intel  should  slow  that  power  consumption 
growth  to  less  than  5%  per  year  as  new 
dual-core  systems  replace  older,  electricity¬ 
sucking  computers.  Intel  claims  the  watts 
per  square  meter  in  the  data  center  will  ac¬ 
tually  decline  with  wide  deployment  of  its 
dual-core  systems. 

While  this  is  good  news  for  the  data  cen¬ 
ter,  does  it  mean  anything  for  your  end 
users’  machines?  I  think  so.  Intel  and  its 
partners  plan  to  introduce  a  slew  of  man¬ 
agement  tools  that  will  use  the  extra  proc¬ 
essor  to  apply  corporate  IT  policies  to  a 
given  computer  without  affecting  the  end 
user’s  experience.  You  could  also  use  the 
management  processor  for  security  —  to 
constantly  monitor  virus  signature  updates,  shut  down 
spyware,  delete  spam  and  defend  against  hackers  who 
attack  the  machine. 

In  some  situations,  you’ll  even  be  able  to  eliminate 
one  PC  from  certain  workers’  desks.  Stacy  Smith,  In¬ 
tel’s  CIO,  says  dual-core  systems  will  let  him  snag  one 
redundant  machine  from  some  engineers  who  now  de¬ 
pend  on  separate  Linux  and  Windows  PCs.  He  will  re¬ 
place  them  with  a  single  laptop  sporting  Linux  on  one 
CPU  in  the  core  and  Windows  on  the  other. 

So,  maybe  it’s  time  once  again  for  hardware  to  drive 
your  upgrade  cycle.  Think  about  the  improved  man¬ 
agement  and  security  of  systems.  Consider  the  savings 
on  your  growing  energy  bills.  And,  oh  yes,  don’t  forget 
about  the  wee  bit  of  extra  performance  you’ll  get  for 
your  applications.  That  counts,  too.  ©  54321 
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This  Free  Event  is  Coming 
to  a  City  Near  You 

CHICAGO,  IL  |  July  12,  2005 
SEATTLE,  WA  |  July  14,  2005 
NEW  YORK,  NY  |  July  19,  2005 
HOUSTON,  TX  |  July  21,  2005 


Top  10  most  important 
opportunities  at  IT 
Strategies  for  Small  to 
Mid-sized  Business: 

10.  Find  out  how  to  squeeze  every  nickel 
and  dime  out  of  your  IT  budget. 

9.  Discover  diabolically  easy  ways  to  get 
around  your  most  irritating  technical 
issues. 

8.  Learn  about  the  collaborative  tools  that 
small  to  mid-sized  businesses  can’t  get 
enough  of. 

7.  Test  the  latest  data  protection 

technology  for  yourself  during  one  of 
several  hands-on  demonstrations. 

6.  The  real  reason  why  wireless  will  grow 
faster  than  wired.  (It’s  not  as  obvious  as 
you  think.) 

...and  5  more  at  the  event! 

who  will  be  there? 

►  James  E.  Gaskin,  Principal,  Gaskin 
Computer  Services  and  Member  of 
Network  World  Lab  Alliance 

►  Small  to  mid-sized  business  executives 
who  are  responsible  for  the  effectiveness 
of  their  organization’s  IT  systems. 

•  Business  owners  and  managers 

•  Network  and  IT  directors  and  managers 

•  Remote  office  directors  and  managers 

►  Leading  solutions  partners 


ttend  IT  Strategies  for  Small  to  Mid-sized  Business  and  you  11 
get  a  practical  blueprint  for  smart  growth. 


IT  Strategies 
for  Small 
to  Mid-sized 
Business: 

A  PRACTICAL  BLUEPRINT 
FOR  SMART  GROWTH 


You'll  hear  how  to  identify  the  technologies  that  will  add  value  to  youi  company. 
You'll  determine  how  to  invest  in  IT  early  enough,  at  the  right  level,  and  deploy 
it  effectively.  And  you'll  see  a  variety  of  innovative  products  and  hands-on 
demonstrations  so  you  can  judge  for  yourself  what  works  best  for  your  organization. 


This  level  of  practical  guidance  can  only  be  found  at  IT  Strategies  for  Small 
to  Mid-sized  Business. 


Seating  is  limited  /  register  today! 

Register  now  at  www.networkworld.com/SMBS5CWA 
or  call  Dori  Smith  at  1-800-643-4668 


PRESENTING  SPONSORS  : 


EXHIBITING  SPONSORS: 


cwiocaii 


Secure  Password 


TECHNOLOGY 


EMC2 

where  information  lives* 


A 

3Com 

Exercise  Choice'” 


AdIrah  anna. 

/  iehvorn 


PSWITCH' 


EMC2 

NETWORKS 


SPAM  AND  SPYWARE  FIREWALLS 


dantz 


Advance  registration  by  qualified  professionals  is  required  for  complimentary  attendance 


Advertising  Supplement 

IT  Careers:  Hot  Skills  Spotlight  on  C#,  .Net 


In  a  sign  of  change,  engineering  and  technology  leaders  are  searching  for  ways  to 
measure  the  productivity  of  software  developers  using  Visual  Basic  languages, 
such  as  C#  and  .Net.  The  reasons  are  simple:  from  litigation  software  to  financial 
compliance  software  to  collaborative  design  software,  the  basics  today  are  the 
many  capabilities  of  C#  language  and  tools  to  create  web-enabled  .Net  capabilities. 

Job  boards  boast  of  literally  hundreds  of  listings  in  the  C#  and  .Net  space,  from 
staffing  firm  Spherion  to  niche  software  development  boutiques. 

Robert  Half  Technology's  second  quarter  jobs  report  says  internet/intranet  enabled 
applications  are  the  second  most  sought-after  development  skill  set,  second  only  to 
networking.  Katherine  Spencer  Lee,  executive  director  of  Robert  Half  Technology, 
says  design  collaboration  tools  continue  to  gain  demand  across  all  businesses,  but 
that  improving  customer  service  and  the  customer  experience  on  a  site  are  critical. 

These  have  been  most  evident  in  direct  consumer  operations,  such  as  banking, 
financial  services  and  insurance.  A  goodly  number  of  the  job  board  postings  reflect 
an  increased  demand  by  boutique  firms  in  Manhattan,  evident  of  the  resurgence  of 
hiring  among  software  providers  for  the  financial  district. 

And  while  C#  and  .Net  have  brought  about  an  evolution  in  programming  skills, 
there  is  a  next  step  to  watch  for.  According  to  Carl  Zetie,  vice  president  and  an 
analyst  in  Forrester  Research's  Application  Development  &  Infrastructure  research 
team,  aspect-oriented  programming  will  address  some  of  the  problems  that  object- 
oriented  programming  doesn't.  In  a  report  issued  earlier  this  spring,  Zetie  notes 
that  language  experts  should  work  through  the  issues  surrounding  object-oriented 
design  rather  than  move  entirely  toward  aspect-oriented  programming.  Regardless, 
the  debate  about  the  two  approaches  is  something  that  decision  makers  will  be 
looking  at  in  the  coming  months. 


For  more  information  about  IT  Careers  advertising,  please  call: 
800.762.2977 


Produced  by  Carole  R.  Hedden 


YOU'RE  INVITED  TO  ATTEND 


July  14,  2005,  5  p.m.  to  9  p.m. 


2300  W.  Plano  Parkway,  Plano,  TX  75075 


(STV  corner  of  Plano  Parkway  &  Custer) 


Register  for  door  prizes! 


SPECIAL  SKILLS  SOUGHT: 


Clinical  Systems. 


Infrastructure. 


SDLC  Project  Management. 


career 

careers 


'Today,  the  application  we  developed  helped  one  of  our 
customers  deliver  a  higher  level  of  service  to  its  clients." 


Since  1988,  Perot  Systems  has 
provided  technology-based 
business  solutions  to  support 
organizations  worldwide  in  many 
of  their  most  important  tasks. 
Through  strategic  design,  proven 
technology,  and  timely  delivery, 
we  help  customers  in  the  healthcare 
industry,  commercial  markets,  and 
the  government  sector  control  costs, 
improve  operational  efficiencies, 
enhance  customer  relationships,  and 
cultivate  business  growth. 


Perot  Systems  is  a  Fortune  1000 
company  with  more  than  16,000 
associates  globally.  We're  looking 
for  talented  IT  professionals  to  join  us 
in  delivering  world-class  solutions  that 
give  our  customers  a  competitive  edge. 
We're  committed  to  our  associates  and 
support  individual  growth  through 
training  and  continuous  professional 
development  in  an  environment  that 
promotes  initiative,  accountability, 
and  integrity. 


People.  Processes. 

Technology.  Results. 

perotsystems 


PEROT  SYSTEMS  and  the  PEROT  SYSTEMS  logo  are  registered  or  unregistered  trademarks  of  Perot  Systems  in  the  United  States,  the 
EU,  and  other  countries.  All  other  trademarks  are  the  property  of  their  respective  owners.  ©  2005  Perot  Systems.  All  Rights  Reserved. 


Perot  Systems  IT  Career  Open  House 


Computerworld  -June  20,  2005 
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SAP  Technical  Professionals: 
Fort  Lee,  NJ  &  client  sites  in  US: 
Analyze,  dsgn,  dvlp,  impimt  & 
troubleshoot  SAP  applies,  infra¬ 
structure  &  interfaces.  Dsgn, 
map  &  dvlp  interfaces  using 
SAP  ALE,  EDI,  Business 
Connector  &  Mercator.  Dsgn  & 
dvlp  web  interfaces  for  SAP 
applies.  Performance  tuning, 
monitoring  &  optimizing  of 
applies.  Impimt  Change  Mgmt  of 
dvlpmt  objects  between  multi¬ 
system  landscape.  Formulate 
specs,  documentation  per  ISO  & 
SEI-CMM  standards.  Analyze  & 
impimt  version  upgrades.  Prep 
time  &  cost  estimates  using  SAP 
Solution  Mgr.  Define  testing 
strategy,  security  &  stress  test 
for  business  processes.  Dsgn  & 
impimt  backup  recovery  proce¬ 
dures.  Req:  Bach  or  equiv  in 
Comp  Sci/Comp  Tech/MIS/ 
Math/  Engg  (Electrical/Electr¬ 
onics/Comp/Telecom/  Mech)  &  2 
yrs  exp  in  job  duties.  Any  suit¬ 
able  combination  of  education, 
training  &/or  exp  that  equates  to 
min  reqmts  also  acceptable. 
Resp:  HR  Mgr,  Larsen  &  Toubro 
Infotech  Ltd,  400  Kelby  St., 
Parker  Plaza,  Fort  Lee,  NJ 
07024.  Fax  201-242-8081. 


Want  a  great 
career? 

The  more  you 
know. ..the 
further  you’ll  go. 


Computerworld’s 

CareerMail 

E-mail 

Newsletter 

Arm  yourself  with 
the  tools  you'll 
need  to  excel  in 
your  career  by 
having  the  latest 
information  on  IT 
careers-related 
issues  delivered 
straight  to  your 
desktop. 


Topics  include: 

.  Recruiting 

.  Job  searching 

.  Training  & 
certification 

.  Contracting 

.  IT  skills. 


Sign  up  today  for  this 
FREE 

e-mail  newsletter! 

Go  to: 

computerworld.com 
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Extended  Systems,  Inc., 
located  in  Boise,  Idaho, 
seeks  a  full-time  Software 
Engineer.  The  position  re¬ 
quires  a  Masters  Degree  in 
Computer  Science,  or  equiv¬ 
alent,  and  2  years  exp.  in 
operations  analysis  and  de¬ 
sign,  programming,  trouble¬ 
shooting  and  debugging. 
Please  fax  resumes  to: 
Human  Resources,  Attn:  S. 
Orr,  208-327-5011;  or  mail 
to:  Extended  Systems,  Inc, 
Attn:  S.  Orr,  5777  N.  Meeker 
Ave.,  Boise,  ID  83713. 


Programmers  &  Software 
Engineers:  Analyze,  de¬ 
sign,  develop,  test,  imple¬ 
ment  specialized  apps.  in 
J2EE,  ASP,  CORBA,  Or¬ 
acle,  SQL  Server,  Tomcat, 
iPlanet,  Soap,  Singleton, 
Cactus  in  Windows/Unix. 
Involves  travel/reloc.  to 
client  sites  in  USA.  Send 
resume:  HR,  GTS,  Inc., 
3761  Venture  Dr.,  Bldg. 
100,  Ste.  240,  Duluth,  GA 
30096.  EOE. 


Software  Engineer  II.  Two  open¬ 
ings.  Develop  software  following 
RUP  methodology:  contnbute  to 
ongoing  design  efforts  with  rec¬ 
ommendations  to  the  product  de¬ 
velopment  on  area  of  expertise. 
Must  have  Bachelor's  degree  in 
Computer  Science,  Eng.  or  relat¬ 
ed;  one  year  experience,  includ¬ 
ing  work  with  multiple  database 
platforms,  Rational  Rose,  Java, 
and  related  technologies  includ¬ 
ing  J2EE,  Struts.  Vignette. 
SOAP,  JAAS,  and  utilizing  JUnit 
with  iterative  development.  Must 
have  implementation  knowledge 
of  multiple  application  servers 
such  as  WebLogic,  WebSphere 
or  Tomcat.  Send  resume  to: 
Praxis  Technology  Group,  LLC, 
Attn:  Mark  Loomis,  2775  86th 
St.,  Urbandale  IA  50323. 


Programmer  Analyst  needed 
w/Bach  or  foreign  equiv  in  Engg 
or  Comp  Sci  or  Math  &  2  yrs  exp 
in  using  applies  in  MSI  format 
using  Wise  Package  Studio  & 
Wise  for  Windows  Installer. 
Perform  test,  script,  conflict 
mgmt  &  isolation  using  VBon 
Windows  Installer  &  ICE  errors. 
Dsgn  &  dvlp  Best  practices  for 
Application  Packaging  & 
Scripting.  Create  minor,  major 
upgrades  &  patches  using  SQL 
d/base.  Dsgn.  impimt  &  config¬ 
ure  using  SMS  suites.  Mail  res 
to:  Integration  Specialist  Inc., 
355  Eisenhower  Parkway, 
Livingston,  NJ  07039.  Job  Loc: 
Livingston,  NJ 


Citicorp  North  American,  Inc. 
seeks  Sr.  Programmer  Analyst 
in  Tampa,  FL.  Utilizing  knowl¬ 
edge  of  a  variety  of  software 
applications  incl.  AutoCAD, 
Oracle  Financials,  Hyperion, 
OLAP,  &  of  real  estate  industry 
applications,  analyze  business 
req.,  write  functional  &  technical 
specs,  design  &  develop  code, 
provide  production  support. 
Req:  Master's  (or  equiv)  in  Bus. 
Admin.,  Comp.  Sci.,  Eng,  plus  2 
years  in  job  offered  or  2  yrs.  as 
Software  Programmer.  Resum¬ 
es  to  Citigroup,  Attn:  CCFS-HM, 
3800  Citigroup  Center,  FLA  77 
A3/03,  Tampa,  FL  33610.  EOE. 
M/F/DA/. 


Calif  based  IT  co  has  open¬ 
ings  at  its  Torrance,  CA  and 
Chicago,  IL  ofes  and  at  unan¬ 
ticipated  client  sites  across  the 
US  for  Software  Eng.  Re¬ 
sponsible  for  custom  program 
development  and  implementa¬ 
tion  and  system  analysis  and 
design.  Will  provide  software 
support  to  clients  that  includes 
testing,  debugging  and  modi¬ 
fying  software.  Bach  degree 
req'd.  Mail  resumes  to  RJT 
Compuquest  Inc..  23430  Haw¬ 
thorne  Blvd.,  #305,  Torrance, 
CA  90505,  Attn:  HR. 


Computer/Information  Systems 
Managers  needed.  Dass,  Inc. 
currently  has  multiple  positions 
available  in  the  Gaffney,  SC 
area  for  qualified  candidates. 
Duties  include:  Develop  & 
implement  computer  systems; 
Monitor  &  manage  business 
equipment,  including  security 
systems,  video  surveillance  & 
POS  terminals.  Traveling  be¬ 
yond  commuting  distance  may 
be  required.  Send  resumes  to: 
Attn:  HR.  731  Chesnee  Hwy., 
Gaffney,  SC  29341.  Reference 
#105. 


Programming  Engineer 

San  Diego  Software  Company 
has  two  positions  available  for 
Programming  Engineer  re¬ 
sponsible  for  designing  and 
implementing  modification  to 
Customer  Management  sys¬ 
tem  Applicants  must  have 
strong  programming  skills  in 
Paradox  5.0,  C++  &  Delphi  4.0. 
BS  in  Computer  Science  or 
related  field.  Sent  resume  to 
Personnel  Dept.,  Corrugated 
Technologies,  Inc.,  15150 
Avenue  of  Science,  San 
Diego.  CA  92128. 


SAP  Labs,  the  world's  larg¬ 
est  inter-enterprise  software 
company  and  the  world's 
third-largest  independent 
software  supplier,  is  seeking 
qualified  professionals  for 
the  following  positions  at  our 
operations  in  Palo  Alto,  CA. 

Development  Architect 
Job  code  5776 

Systems  Architect 
Job  code  5777 

Please  apply  online  at 
http://www.sap.com/usa/ 

careers/index.aspx  and  indi¬ 
cate  job  code  listed  above. 


Software  Developer  for 
Cincinnati:  Develop  new 
software  using  C#\VB.net, 
ASP.net,  XML,  HTML,  Visu¬ 
al  Basic,  Java,  C++,  Perl / 
CGI  with  MS  SQL  Server, 
Oracle,  SQL,  PL/SQL,  DB2 
in  Windows  NT,  and  UNIX 
(Solaris)  etc.  MBA,  MIS,  MS 
Computers  or  related  de¬ 
gree  with  3-6  months  expe¬ 
rience.  Competitive  wage, 
40  hrs./wk.  Send  resume  to: 
HR  Manager;  Interactive 
Solutions,  LLC;  155  Tri 
County  Pkwy.  #111;  Spring- 
dale,  OH  45246. 


Computerworld 


Software  Dvlp  Manager  wanted 
by  online  Advt  co.  in  NYC.  Man¬ 
ages  aspects  of  the  dvlp  team 
incl.  coding,  standards,  design, 
architecture,  unit  testing  Dvlp, 
writes,  documents,  tests,  de¬ 
bugs  and  impl.  code  to  create, 
support,  maintain,  enhance, 
troubleshoot,  repair  co.  web- 
enabled  appls.  Must  have 
Master's  +  3  yrs.  exp.  in  three- 
tier  soft,  and  web-enabled  appl. 
dvlp  of  highly  interactive  and 
trafficked  apps  using  ASP,  VB6, 
SQL2000,  MTS.  IIS;  with  3  yrs. 
exp.  leading  dvlp.  teams  and  2 
yrs.  exp.  in  internet  dvlp.  using 
netwrk  protocols.  Must  have  1 
yr.  exp.  in  XML  and  XSL  schem¬ 
as.  In  lieu  of  Master's  +  3  yrs. 
exp.,  will  accept  Bach.  +  5  yrs. 
progressive  exp.  in  job  offered 
or  rel.  occup.  Respond  to  HR 
Dept.  Fax  (646)  223-1206, 
eXact  Advt.,  LLC,  18W.  18th  St., 
11th  FL.  NY,  NY  10011. 


Computer  Professionals  for  NJ 
based  IT  firm:  Jr.  Level 
Positions:  Programmer  Anal¬ 
ysts,  Software  Engineers, 
Systems  Analysts,  Database 
Administrators  to  Develop,  cre¬ 
ate,  and  modify  general  comput¬ 
er  applications  software  or  spe¬ 
cialized  utility  programs.  Analyze 
user  needs  and  develop  soft¬ 
ware  solutions. 

Sr.  Level  Positions:  IT  Manager, 
MIS  Manager,  ITS  Director 
needed  to  Plan,  direct,  or  coordi¬ 
nate  activities  in  such  fields  as 
electronic  data  processing,  infor¬ 
mation  systems,  systems  analy¬ 
sis,  and  computer  programming. 
Apply  with  2  copies  of  resume  to 
H  R.,  JSMN  International,  Inc., 
591  Summit  Ave,  Ste#  522, 
Jersey  City,  NJ  07306 


Mphasis  Corporation  has  multi¬ 
ple  openings  for  the  following 
positions  at  its  office  in  New 
York,  NY,  and  unanticipated  cli¬ 
ent  sites  throughout  the  U.S.: 

1.  Software  Engineer:  analyze, 
design,  test  &  maintain  software 
applications. 

2.  Project  Manager:  Plan  and 
coordinate  activities  of  software 
professionals. 

Must  have  BS  or  M  S  or  equiva¬ 
lent  and  up  to  two  years  of  expe¬ 
rience  in  job  offered  or  related 
field.  Please  send  resume,  sal¬ 
ary  history  and  position  applied 
for  to  460  Park  Avenue  South, 
Suite  #1101,  New  York,  NY 
10016,  Attn  H  R.  Manager  with 
Ref.  CWIT01/0605. 


Systems  programmer  wanted  by 
online  advt.  co.  in  NYC.  Dvlp 
appl.,  reverse  eng.,  writes  hip; 
maintains  appl.  Must  have  mas¬ 
ter's  in  Comp.  Sc.,  Eng.  or  rel. 
field,  3  yrs.  exp.  as  s/w  eng.  or 
rel.  occup.  w/3  yrs  exp.  w/SE 
Mktg  rel.  tasks.  In  lieu  of 
Master's,  we  will  accept  Bach.  + 
5  yrs.  progressive  exp.  in  job 
offd  or  rel.  occup.  Must  have  spl 
knowl.  in  HIP,  Failure  Recovery, 
Complex  SE  Algo  and  Netwrk 
Protocols.  Must  possess  knowl. 
of  PBS  &  Spiders  &  BHO  & 
analysis  based  content  mgmt  for 
providing  feed  to  SEs.  Respond 
to  HR  Dept.  Fax  (646)  223- 
1206,  Exact  Advt.,  LLC,  18W. 
18th  St.,  11th  FI.,  NY,  NY  10011. 


Software  Project  Manager  need¬ 
ed  w/Masters  deg  &  1  yr  exp  to 
plan,  organize,  direct  &  coord 
MS  technologies  based  s/ware 
dvlpmt  projects.  Dsgn,  dvlp  & 
create  s/ware  applic.  using 
industry's  standard  OOA&D 
techniques,  SDLC  principles  & 
S/ware  Dsgn  Patterns.  Gather 
systms  reqmts  from  clients  & 
translate  in  form  of  UML  dia¬ 
grams  &  RUP  docs.  Dvlp,  main¬ 
tain  &  track  comprehensive  pro¬ 
ject  plans  using  MS  Project.  1  yr 
exp  as  S/ware  Dvlpr  is  accept¬ 
able.  Supv  2  employees.  Send 
resumes  to:  BCC  USA,  Inc.,  43 
Stouts  Lane,  Monmouth 
Junction,  NJ  08852.  Job  loc: 
Monmouth  Junction  or  unantici¬ 
pated  Iocs  in  US. 


June  20,  2005 


Programmers,  Software  Engin¬ 
eers  (Apps.  &  QA)  &  DBAs.  An¬ 
alyze,  design,  develop,  test  & 
implement  specialized  apps.  in 
(a)  J2EE  &  rel.  tools,  Microsoft 
Tech.,  Weblogic/Websphere, 
C++,  Rational  Rose,  Oracle  & 
rel.  tech.,  (b)  Microsoft  Tech.  - 
VB,  ASP,  .Net,  C #,  Java  &  rel. 
tools,  Oracle,  Nunit,  Linux;  (c) 
Database  admin.  (>  1  TB  data) 
in  MS  SQL  Server  7/2000/  Or¬ 
acle,  Access  2000,  SQL*Loader, 
Java,  Crystal  Reports  &  rel. 
tech.;  (d)  Software  QA  in  Win 
Runner,  Test  Director,  PVCS 
Tracker,  Load  Runner,  Quick 
Test,  Microsoft  Tech.,  J2EE/ 
Java,  Oracle  (Perform  manual, 
web,  client/server,  functional, 
integration,  systems,  data  dri¬ 
ven,  regression,  performance, 
stress  &  load  tests).  Send 
resume  to  Instcomp,  Inc.,  4501 
Circle  75  Pkwy.,  Ste.  C-3140, 
Atlanta.  GA  30339. 


Database  Administrator  Manag¬ 
er  wanted  by  advtg  co.  in  NYC. 
Implmnt  changes  to  d/bases; 
creates,  reviews,  debugs  stored 
procedures,  triggers,  UDF, 
selectivity,  statistical  updates, 
scale  federated  servers,  SQL- 
DMO  Must  have  Master's  in 
Comp.  Sc.,  Phys..  or  rel  field  +  3 
yrs  exp.  using  SQL  server  2000, 
MYSQL,  Replication,  ODBC, 
UMS,  DTS  w/global  variables, 
SQLAgentCmdExe,  Alarmlog- 
ger,  SQLserverheartbeat  algo¬ 
rithm,  Webbased  SE  VLDB 
Must  have  spec,  knowl.  in 
change  CTRL,  DBCC,  OLAP, 
fulltext  search,  VPN,  isolation 
levels,  analysis  services,  XML, 
optimization,  VB  Scrip.,  SAN 
clustering,  NAS.  In  lieu  of  Mas¬ 
ter's  +  3  yrs  exp.,  will  accept 
Bach  +  5  yrs  progr  exp 
Respond  to  HR  Dept.  (646)  223- 
1206  or  mail  to  eXact  Adv.  LLC. 
18W  18th  St.,  11th  FI.,  NY,  NY 
10011. 


Programmer  needed 

for 

educational  software 

co. 

Bachelor's  in  Comp  Sci  (or 

equiv)  and  1  yr  exp 

req. 

Resumes  to:  Job  Code: 

PR010,  HR  Dept, 

FSCreations,  Inc. 

621 

Mehring  Way,  Ste. 

228, 

Cincinnati,  OH  45202. 

No 

calls.  EOE. 

Software  Engineers/Systems 
Analysts:  Techno/functional 
analysis,  obtain  user  require¬ 
ments,  map  business  pro¬ 
cess,  design,  develop,  test  & 
configure  ERP  to  tailor  to 
client  needs  in  Oracle  1 1  i/E- 
Business  Suite  &  SAP  in 
Purchasing,  Internet  Procure¬ 
ment,  Isupplier,  Inventory, 
Manufacturing  (WIP,  BOM, 
MRP),  Order  Management/ 
Distribution  and  Financials 
(AP,  AR  and  GL).  Mail  res¬ 
ume  to  SSG,  Inc,  3300 
Buckeye  Rd.,  Suite  555, 
Atlanta,  GA  30341. 


Mphasis  Corporation  seeks 
Technical  Recruiter  to  assist 
with  hiring  and  recruitment 
practice,  and  H.R.  function  at 
its  office  in  New  York,  NY. 
Must  have  Master  or  equiva¬ 
lent  in  Business  Administra¬ 
tion,  Business,  Management, 
Psychology,  Social  Work  or 
related  studies. 

Please  send  resume  and 
salary  history  applied  for  to 
460  Park  Avenue  South,  Suite 
#1101,  New  York,  NY  10016, 
Attn;  H.R.  Manager  with  Ref. 
CWHR01/0605. 


Team  Lead  (Systems  Architect) 
Hetrosys  LLC  has  openings  in 
the  Detroit,  Michigan  area  and 
nationwide  for  Team  Lead 
(Systems  Architect)  in  the  UNIX 
System  Administration  and 
Oracle  Database  Administration 
areas.  Duties  include  managing 
projects  and  assigning  and 
reviewing  work  of  team  mem¬ 
bers.  In  the  UNIX  Systems 
Administration  area,  oversee 
systems  analysis,  monitoring, 
configuration,  implementation, 
and  administration  of  high  avail¬ 
ability  UNIX  computer  networks. 
Positions  require  Master's 
Degree  or  equivalent  (Bach¬ 
elor's  plus  five  years  experi¬ 
ence)  in  Computer  Science  or 
related  field,  two  years  of  experi¬ 
ence  as  a  Senior  UNIX  Systems 
Administrator,  and  working 
knowledge  of  EMC  Service 
Guard  and  NetApps  Filers.  In 
Oracle  Database  Administration 
area,  oversee  design,  develop¬ 
ment,  customization  and  admin¬ 
istration  of  Oracle  Relational 
Database  Management  Syst¬ 
ems.  Positions  require  Master's 
Degree  or  equivalent  (Bach¬ 
elor's  degree  plus  five  years  of 
experience)  in  Computer 
Science  or  related  field,  two 
years  of  experience  as  an 
Oracle  Database  Administrator, 
and  working  knowledge  of 
Oracle  eBusiness  Suite,  Kintana 
and  Test  Director.  Send  resumes 
by  mail  to  Harpreet  Soni, 
Hetrosys,  1382  Trestlewood  Dr., 
San  Jose,  CA95138. 


Account  Managers  needed  by 
IT  Convergence  to  work  in  San 
Francisco,  CA  and  other  areas 
throughout  the  U.S.  Must  have 
Bachelor’s  in  Business,  Econo¬ 
mics,  Advertising,  Business  Law, 
or  closely  related  field.  Please 
send  resume  to  HR,  IT  Conver¬ 
gence,  150  E.  Gilman  St.  Ste. 
B2200,  Madison,  Wl  53703  or 
am@itconverQence.com.  or  Fax 
415-962-4490. 

Systems  Analysts  needed  to 
work  as  consultants  at  client 
sites  in  the  U.S.  and  abroad. 
Systems  Analysts  reqs:  BA/BS 
in  Comp  Sci,  Eng’g,  Bus. 
Logistics,  HR  or  related  field  +  2 
yrs  exp  w/Oracle  Apps  or  DB’s; 
Send  resumes,  refs,  and  salary 
req’s  to  Attn:  HR,  IT  Conver¬ 
gence,  150  E.  Gilman  St,  Ste 
B2200,  Madison,  Wl  53703  or 
svsanalvst@itconveraence.com 

or  Fax  415-962-4490 

Software  Engineers  needed  to 
work  as  consultants  at  client 
sites  in  the  U.S.  and  abroad, 
reqs:  BA/BS  in  Engineering, 
Comp  Sci,  Bus  Adm,  or  related  + 
5  progressive  exp  or  Master’s. 
Send  resumes,  refs,  and  salary 
req’s  to  Attn:  HR,  IT  Converg¬ 
ence,  150  E.  Gilman  St,  Ste 
B2200,  Madison.  Wl  53703  or 
csenaineer@itconveraence.com 

or  Fax  415-962-4490. 


The  Cooler  is  looking  for  a 
Technology  Administrator  -  Must 
have  4  yrs.  exp.  in  the  job 
offered  or  4  yrs  in  Information 
Technology  Management.  To 
install,  configure  and  support 
The  Cooler's  infrastructure  to 
include:  LAN/WAN,  wireless  net¬ 
work  &  internet/intranet  sys¬ 
tems,  maintain  &  monitor  all  net¬ 
work  components  to  insure 
uptime  and  availability;  use  cost- 
benefit  analysis  to  coordinate 
vendors  to  determine  the  best 
solution  for  optimal  and  efficient 
functions;  implement  on-site 
security  and  virus  protection, 
unauthorized  intrusion  onto  cor¬ 
porate  networks  or  sys.  &  loss  of 
corp  data,  &  determine  and 
implement  disaster  &  recovery 
plan,  &  maintain  all  of  the 
Cooler's  websites  to  ensure 
timely  &  correct  additions  of 
information  related  to  all  Cooler 
activities.  Qualified  candidates 
must  send  resume  to  Brian 
Stout,  The  Cooler,  10800  Davis 
Drive,  Alpharetta,  GA  30004. 
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Mitigating  IT  Risk 


■  Organizations  that  develop  most  of  their  soft¬ 
ware  in-house  should  carefully  consider  the  risks 
of  outsourcing  requirements  planning.  Relation¬ 
ships  between  internal  developers  and  business  cus¬ 
tomers  are  typically  stronger  than  with  third  parties. 


TIPS 


■  Ensure  that  outsourcing  contracts  give  your  company  the  right 
to  conduct  periodic  audits  of  your  vendors. 


«tfe 


■  Create  a  vendor  monitoring  system  so  that  business  managers 
who  are  accountable  for  risk  in  their  departments  are  also  monitoring  risks 
related  to  the  vendors  they  work  with. 


■  Consider  adopting  a  controls  framework  to  apply  a  common 
approach  to  enterprise  risk  management. 


i 


■  Coordinate  policies  between  IT,  human  resources  and  legal 
departments  to  stem  the  amount  of  intellectual  property  that  departing 
employees  can  take  from  your  company. 


Continued  from  page  1 

Risk 


where  banks  and  brokerages 
often  are  entrusted  with  the 
life  savings  of  their  customers. 

“Customers  don’t  care  if 
you  lost  a  data  setting  or  a  sys¬ 
tem  —  they  want  to  feel  se¬ 
cure  about  where  they’re  in¬ 
vesting  their  money,”  said 
Bruce  Pomerantz,  head  of  IT 
infrastructure  and  architec¬ 
ture  for  corporate  investment 
banking  and  markets  at  New 
York-based  HSBC  Securities 
(USA)  Inc. 

Several  conference  speakers 
noted  that  IT  risk  manage¬ 
ment  issues  are  now  being  ad¬ 
dressed  as  business  decisions, 
reflecting  the  degree  to  which 
IT  has  become  tightly  inter¬ 
twined  with  business  units. 

For  Bank  of  America  Corp., 
“it  becomes  an  insurance 
equation  at  some  point  — 
What  are  we  willing  to  spend 
to  avoid  a  risk  event?”  said 


Graham  S.  Seel,  global  trea¬ 
sury  services  technology  risk 
executive  at  the  Charlotte, 
N.C.-based  bank. 

Getting  Ahead 

As  part  of  its  risk  management 
efforts,  Prudential  Financial 
Inc.  in  Newark,  N.J.,  gave  itself 
a  jump-start  in  complying 
with  regulations  such  as  the 
Health  Insurance  Portability 
and  Accountability  Act  and 
the  Sarbanes-Oxley  Act. 

The  financial  services  firm 
created  a  “first  alert”  database 
system  eight  years  ago  to  help 
it  review  all  pertinent  new 
regulations  and  create  action 
plans  for  each  affected  area  in 
the  company,  including  IT, 
said  Mario  Mosse,  Prudential 
Financial’s  vice  president  of 
corporate  risk  management. 

For  example,  the  approach 
helped  the  company  create  a 
separate  automated  database 
to  store  all  of  its  Sarbanes- 
Oxley  documentation  proce¬ 
dures,  Mosse  said. 


When  Dow  Jones  &  Co.  be¬ 
gins  working  on  large-scale 
projects,  it  makes  additional 
IT  architecture  and  infrastruc¬ 
ture  investments  to  help  sup¬ 
port  the  new  systems  as  they 
go  into  production.  Such 
moves  are  meant  to  serve  as  a 
preemptive  risk-mitigation 


strategy,  said  Jonathan  Squire, 
information  security  architect 
in  the  business  publisher’s 
Princeton,  N.J.,  office. 

For  example,  as  part  of  its 
efforts  to  support  changes  in 
handling  Visa  and  MasterCard 
credit  card  transactions,  Dow 
Jones  created  a  more  scalable, 


centralized  support  system  to 
handle  fraud  detection  across 
different  areas  of  the  company, 
Squire  said. 

IT  risk  management  con¬ 
siderations  should  also  extend 
to  contract  negotiations  with 
vendors  and  outsourcers,  said 
Warren  Axelrod,  director  of 
global  information  security  at 
Pershing  LLC,  a  financial  ser¬ 
vices  firm  based  in  Jersey 
City,  N.J. 

“Usually,  the  more  powerful 
negotiator  tries  to  shift  the 
risks  [for  the  contract]  onto 
the  less  powerful  negotiator,” 
said  Axelrod.  A  technique  to 
mitigate  risks  in  outsourcing 
deals,  said  Axelrod,  is  to  en¬ 
sure  that  the  customer  is 
achieving  cost  savings  and 
that  the  vendor  is  able  to 
glean  a  profit.  ©  55086 


MORE  THIS  ISSUE 

Recent  data  security  failures  provide  valuable 
lessons  in  the  importance  of  IT  risk  manage¬ 
ment.  Make  sure  your  executives  learn  them, 
writes  Barbara  Gomoiski.  Page  44 


Continued  from  page  1 

NetApp 

technology  as  part  of  a  search 
for  data  security  systems. 

Hughes,  director  of  IT  at 
Independence  Air  Inc.,  said  he 
will  look  into  buying  Decru’s 
DataFort  encryption  appliance 
over  the  next  few  weeks.  The 
Dulles,  Va.-based  regional 
airline  installed  a  NetApp 
FAS960  network-attached 
storage  array  last  March,  and 
Hughes  said  NetApp  provides 
some  legitimacy  to  the  Decru 
system.  He  also  likes  the  idea 
of  having  a  single  point  of 
contact  for  both  storage  and 
encryption  products. 

Independence  Air  had  re¬ 
cently  started  looking  at  en¬ 
cryption  products  as  part  of 
an  effort  to  comply  with  new 
information  security  require¬ 
ments  from  MasterCard  Inter¬ 
national  Inc.  and  Visa  U.S.A. 
Inc.  and  to  keep  from  joining 
the  list  of  companies  that 


have  lost  customer  data. 

“If  my  customer  data  gets 
compromised,  there’ll  be  news 
vans  outside  of  my  building,” 
Hughes  said.  “I  need  to  find 
some  mechanism  to  protect 
my  data  while  it’s  residing  on 
my  network  shares  and  disk.” 

Market  Rush 

The  acquisition  by  Sunnyvale, 
Calif.-based  NetApp  trumps 
the  rest  of  the  industry  in 
what  will  likely  be  a  rush  by 
other  vendors  to  either  ac¬ 
quire  or  develop  their  own 
storage  security  technology, 
said  Jon  Oltsik,  an  analyst  at 
Enterprise  Strategy  Group  Inc. 
in  Milford,  Mass. 

Although  storage  security 
currently  is  only  a  $60  million 
market  annually,  Oltsik  pre¬ 
dicted  that  within  two  years, 
“you  won’t  be  able  to  have  a 
conversation  with  a  client 
about  storage  without  talking 
about  security.” 

Rich  Mogull,  an  analyst  at 
Gartner  Inc.  in  Stamford, 


Conn.,  said  large  businesses 
are  nervous  about  facing  the 
bad  publicity  that  accompa¬ 
nies  data  loss  or  theft.  Such 
fears  have  been  driving  the 
storage  security  market  over 
the  past  six  to  nine  months, 
Mogull  said. 

He  added  that  the  market 
will  be  further  stimulated  by 
the  backing  of  a  large  storage 
vendor  like  NetApp. 

Since  February,  security 
breaches  have  caused  the  loss 
of  unencrypted  data  from 
companies  such  as  Bank  of 
America  Corp.,  Ameritrade 
Holding  Corp.,  Time  Warner 
Inc.,  ChoicePoint  Inc.  and 
LexisNexis  Group. 

To  protect  itself,  Boeing 
Employees  Credit  Union 
(BECU)  for  the  past  eight 
months  has  been  encrypting 
all  data  written  to  backup 
tapes,  using  an  appliance  from 
Decru  to  guard  against  unau¬ 
thorized  access  to  information 
moved  off-site. 

Daniel  Chow,  IT  systems 


JOINING  FORCES 

Decru  Inc. 

Redwood  City,  Calif 
Founded:  2001 
Funding:  $45  million 

UiC';'/;;':  70' 


Network 
Appliance  Inc. 

Sunnyvale,  Calif. 

Founded: 1992 

S1.1  billion 
2,844 


and  security  engineer  at 
BECU,  said  the  “buzz  around 
security  and  data  at  rest” 
prompted  his  company  to  de¬ 
ploy  encryption  technology. 
“We  wanted  to  make  sure  we 
were  being  proactive,”  he  said. 

Companies  are  also  increas¬ 
ingly  being  pressured  to  en¬ 
crypt  data  by  federal  and  state 
privacy  regulations  such  as 


the  Gramm-Leach-Bliley  Act 
and  the  California  Database 
Breach  Notification  Act. 

Other,  smaller  vendors  in 
the  data  encryption  appliance 
business  include  NeoScale 
Systems  Inc.,  Kasten  Chase 
Applied  Research  Ltd.  and 
Vormetric  Inc. 

The  deal  between  NetApp 
and  Decru  is  expected  to  close 
in  October.  “We  just  think 
there’s  a  great  market  oppor¬ 
tunity.  Decru  ...  is  clearly  the 
market  leader,”  said  NetApp 
CEO  Dan  Warmenhoven.  “You 
look  at  the  approach  they’ve 
taken,  and  it’s  incredibly 
aligned  to  our  own.  It’s  an  ap¬ 
pliance-based  model.” 

Warmenhoven  said  he  would 
keep  Decru  independent  and 
set  it  up  more  or  less  as  “an  in¬ 
ternal  OEM  to  the  Network 
Appliance  sales  force  and 
channels.”  At  the  same  time, 
Decru  will  maintain  existing 
reseller  arrangements  that  it 
has  with  NetApp  competitors, 
Warmenhoven  said.  ©  55081 
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Disk  Crypto  Redux 

YOU’VE  GOT  ANSWERS,  I’ve  got  questions.  Your  re¬ 
sponses  are  coming  in  fast  about  my  column  last  week 
on  Seagate’s  forthcoming  hard  disk  drive  that  automati¬ 
cally  encrypts  everything  on  it  [QuickLink  54920].  I 
think  built-in,  transparent  encryption  is  a  great  idea 
that  should  be  extended  to  just  about  everything  IT  departments 
provide  —  including  networks,  file  servers,  and  tape  backup  systems. 
But  as  many  of  you  point  out,  it’s  not  so  simple. 

“From  a  security  analyst’s  perspective,  if  the  technology  is  easy  to 


use  and  cost-effective,  users  may  speed  up 
adoption  of  these  drives  at  the  expense  of  other 
security  measures,”  one  reader  writes.  True 
enough  —  but  should  we  pass  on  a  chance  to 
add  a  layer  of  security,  even  if  it  may  make 
more  security  a  tougher  sell? 

Or  should  we  just  not  tell  users  the  encryp¬ 
tion  is  there,  so  the  money  comes  from  the 
hardware  budget  instead  of  the  security  budget? 

Speaking  of  telling  (or  not),  that  reader  also 
wants  Seagate  and  other  vendors  to  tell  us  their 
encryption  algorithms  so  we  can  assess  their 
strength.  I  asked  Seagate,  whose  representative 
told  me  the  current  design  uses  Triple  DES 
with  192  bits’  worth  of  keys.  That  may  change, 
he  said,  but  “we  will  most  certainly  use  a  public 
and  standard  algorithm.”  Good  answer. 

Another  reader  says,  “Users  need  to  grow  up 
a  bit  in  their  understanding  of  technologies  and 
the  risk  that  they  are  the  cause  of.  IT  needs  to 
stand  up  to  users  and  enforce  standards.  Cur¬ 
rently,  security  is  technology,  process  and  peo¬ 
ple,  and  the  third  leg  is  where  it  falls  over.” 

And  what  about  office  politics,  which  lets 
powerful  users  stay  risky  and  makes  IT  afraid 
to  lay  down  the  law?  We  won’t  change  human 
nature,  and  we  can’t  overhaul  the  pecking  order 
overnight.  So  we’re  stuck  with  edu¬ 
cation,  plus  technology  and  proc¬ 
ess.  Or  is  there  another  way  that 
we’re  missing? 

From  a  consultant:  “What  Seagate 
should  provide,  or  if  not  what  inter¬ 
nal  IT  should  develop  independent¬ 
ly,  is  a  Trojan  horse  that  grabs  the 
password  as  the  user  enters  it  and 
registers  it  in  a  protected  password 
vault.  If  the  Trojan  turns  out  to  be 
technologically  unfeasible,  IT  can 
at  least  provide  a  facility  on  the 
company  intranet  for  voluntarily 
registering  the  password.” 


Does  IT  really  want  to  get  into  the  virus¬ 
writing  game?  On  the  other  hand,  is  voluntary 
registration  enough?  IT  can  control  passwords 
for  the  drives  we  install  on  users’  machines,  but 
can  those  passwords  be  changed?  Should  they 
be  changed  regularly?  Or  is  the  drive’s  pass¬ 
word  also  an  encryption  key,  in  which  case 
changing  the  password  would  mean  re-encrypt¬ 
ing  the  entire  drive? 

“As  soon  as  you  have  entered  your  password, 
this  doesn’t  protect  your  data,”  adds  another 
reader.  “All  those  back  doors,  worms,  Trojans, 
et  al.,  can  still  read  your  data  and  send  it  over 
the  Internet.  This  doesn’t  explain  how  data  will 
be  protected  on  the  backup  server,  either.” 

Too  true.  Getting  encryption  built  into  IT 
products  is  a  little  more  protection  —  but  it’s 
no  panacea.  But  is  any  single  layer  of  security 
ever  going  to  be  enough? 

Finally:  “I  tried  to  envision  how  ‘invisible  en¬ 
cryption’  would  work,  and  could  not.  When  a 
machine  (a  laptop,  say)  is  turned  on,  a  pass¬ 
word  would  be  required  at  a  very  early  stage; 
otherwise,  a  thief  would  be  able  to  boot  up  and 
get  access.  So  how  would  users  manage  that 
password?  That’s  where  the  rubber  meets  the 
road  in  terms  of  trade-offs  of  a  good  key  and 
good  transparency.” 

OK,  it’s  not  a  panacea  and  it’s 
not  truly  transparent.  Can  we  use 
a  single  sign-on  approach,  so  the 
drive,  operating  system  and  net¬ 
work  all  open  up  from  one  pass¬ 
word  typed  once?  Are  we  better  off 
with  a  pile  of  passwords  that  users 
may  stick  on  their  laptops  with 
Post-it  notes?  And  will  we  ever  find 
the  right  trade-offs  to  make  better 
security  easy  —  or  at  least  easier? 

Until  we  start  crash-testing  prod¬ 
ucts  with  built-in  encryption,  we’ll 
never  know.  ©  55053 
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Unclear  on  the  Concept 

Pager  goes  off,  and  sysadmin  pilot  fish  checks  her 
voice  mail.  “My  monitor  is  smoking  and  making  nois¬ 
es,"  user’s  message  says.  “I  think  it’s  on  fire.  Can  you 
take  a  look  at  it?”  Fish  sprints  to  the  user’s  office  and 
pulls  the  plug  on  the  smoldering  niftilor.  Relieved 
user:  “Thanks,  it  was  getting  hot  in  here.”  Says  fish, 
“I’ll  never  understand  why  he  stuck  to  the  IT  support 
procedure  but  not  to  any  fire-hazard  safety  ones.” 


Wire  Loose 

At  a  meeting  at 
this  cell  phone 
service  provider, 
tech  pilot  fish  is 
going  into  detail  about 
the  importance  of  core 
fiber  cabling  capacity  to 
meet  the  growing  de¬ 
mand  of  the  mobile  net¬ 
work.  But  baffled  mar¬ 
keting  guy  interrupts: 
“Cables?  Cables?  We’re 
wireless,  guys!” 

Learning  Process 

As  soon  as  support  pilot 
fish  arrives  at  boss’s 
office,  boss  tears  into 
fish  for  failing  to  keep 
the  PCs  running  proper¬ 
ly.  When  the  rant  finally 
ends,  fish  asks  what  the 
problem  is.  “The  boss 
explains  that  his  CD 
drive  isn’t  working,”  fish 
reports.  “I  open  up  the 
CD  drive,  turn  the  disk 
over  and  put  it  back  in. 
Boss’s  comment:  ‘At 
least  you’re  learning 
from  your  mistakes.’  ” 

That’ll  Help 

Secretary  inherits  a 
large  electronic  mailing 
address  list  to  use  and 
calls  IT  pilot  fish  for 
help.  “She  wanted  to 
have  it  sorted  by  name 
to  make  it  easier  to  find 
duplicates  and  so  forth,” 
says  fish.  “I  said  sure, 
just  send  me  the  file.  An 
hour  later,  a  stack  of 
200-plus  pages  arrived 
by  interoffice  mail.  She 


had  printed 
each  address 
on  the  list  on 
its  own  page 
for  me  to  sort.” 

Close,  But . . . 

Sysadmin  pilot  fish  is 
watching  over  midrange 
systems  on  the  evening 
shift  when  he  notices  a 
fellow  midrange  IT  guy 
who’s  having  trouble 
with  his  PC.  “His  com¬ 
puter  crashed  and 
wouldn’t  reboot,”  fish 
says.  “He  said  he  had  a 
huge  bunch  of  old  Excel 
files  that  he  didn’t  recog¬ 
nize  and  no  longer  want¬ 
ed.  When  he  deleted 
them,  the  computer 
failed.  I  asked  him  just 
what  exactly  he  did.  He 
said  he  searched  for  all 
the  ‘.exe’  files  and  delet¬ 
ed  them.” 

Probably  Not 

This  pilot  fish’s  IT  shop 
is  improving  its  process¬ 
es,  and  fish  is  training 
software  developers  in 
the  new  estimation  pro¬ 
cedure.  “I  indicated  that 
while  we  have  a  proce¬ 
dure  to  follow  and  a  tem¬ 
plate  to  document  their 
estimates,  sometimes 
they  have  to  use  judg¬ 
ment  to  know  what  and 
when  to  estimate,”  fish 
reports.  Trainee's  re¬ 
sponse:  “Well,  how  do 
we  know  when  to  use 
judgment?  Is  that  docu¬ 
mented  anywhere?” 
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DOCUMENT  YOUR  TRUE  TALE  of  IT  life  for  Sharky 
at  sharky@computerworld.com.  You'll  snag  a  snazzy 
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Shar&the  fast  lane.  The  pace  of  modern-day  investing  can  boggle  the  mind.  And  overwhelm  the  data  center.  So  Sun  and  AMD  are  working 
on  faster,  next-generation  systems  for  Wall  Street.  Benchmarks  show  that  Sun  Fire™  V40z  servers,  employing  Dual-Core  AMD  Opteron 
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processors,  deliver  world  record  performance.1  And  dual-core  processing  helps  save  money,  too.  How  much?  About  $2  million  a  year  in 


power  costs  alone?  That’s  what  financial  firms  call  a  smart  investment.  The  performance  is  the  asset.  The  network  is  the  computer.™  Share 
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The  blade  made  for  Linux.  The  tools  to  make  it  better. 


Put  a  world  leader  in  blades  and  Linux  to  work  for  you.  More  and  more  businesses  are  finding  that  HP  BladeSystem  servers  are  the  tool  their  data  center  needs. 
One  reason  is  that  HP's  blades  are  optimized  for  Linux.  Not  only  do  they  ship  with  powerful  software  tools,  like  HP  Systems  Insight  Manager™  and  ProLiant  Essentials, 
they  also  run  key  Linux  apps  from  software  partners  like  PeopleSoft  and  Oracle.  And  with  powerful  AMD  Opteron™  Processors,  you  get  maximum  performance 
now  as  well  as  the  flexibility  to  transition  to  64-bit  computing  now  or  in  the  future.  In  short,  HP  offers  you  the  advantages  of  blades,  Linux  and  legendary  HP  reliability 
all  in  one  neat,  affordable  package.  Get  more  support,  technology  and  advice  from  HP.  So  you  can  build  the  I.T.  you  need. 


HP  ProLiant  BL25p  Blade  Server 


HP  ProLiant  BL35p  Blade  Server 


THE  SOLUTIONS 


•  BL25p:  2  AMD  Opteron™  Processors  Model  200 
(up  to  2.60GHz) 

•  BL35p:  2  AMD  Opteron™  Processors  Mode!  200 
(2.40GHz) 

e  BL25p:  Up  to  48  servers  per  rack 

•  BL35p:  Up  to  96  servers  per  rack 

•  HP  Systems  Insight  Manager™  for  Web-based 
networked  management  through  a  single  console 

•  Rapid  Deployment  Pack  for  ease  of  deployment  and 
ongoing  provisioning  and  reprovisioning  in  Linux- 
mixed  OS  environments  (optional) 


THE  BENEFITS' 

•  Up  to  23%  savings  on  acquisition  cost 

•  Up  to  23%  less  power  consumption 

•  Up  to  93%  fewer  cables 

•  43%  less  space  needed  for  same  number  of  processors 

•  Hot-swappable  server  design 

•  Single  interface  for  local  and  remote  management 
of  servers,  storage,  software  and  networking 


Enhance  your  system.  HP  STORAGEWORKS  MSA1500CS 

-  Up  to  24TB  of  capacity  (96  250GB  SATA  drives)  -  Up  to  16TB  of  capacity 
(300GB  SCSI  drives)  ~  Ability  to  mix  SCSI  and  Serial  ATA  enclosures  for 
greater  flexibility  -  2GB/1GB  Fibre  connections  to  host  flexibility 

Save  up  to  $844  on  the  4-hour  response,  24-hour-a-day,  3-year  warranty  upgrade2 


Save  $1,744  when  you  purchase  an  HP  BladeSystem  enclosure 
and  8  BladeSystem  Management  Suite  Licenses.3 


CALL 

1-866-625-3575 

. —  ' . 

CLICK 

www.hp.com/go/bladesmag46 

CONTACT 

your  local  reseller 

n  v  e  n  t 


1  Based  on  internal  HP  testing,  compared  to  similarly  configured  HP1 U,  2P  server  with  SAN  connectivity.  For  configurator,  please  visit:  http://h30099.  www3.tip.com/configurator/catalog-issipc, asp,  2.  Offer  valid  through  7/31  /05  on  purchase  of  four-hour  response,  24-hour-a-day,  three-year  warranty  upgrade 
for  MSA  1 000  or  MSA  1 500  products.  3.  Offer  valid  through  8/31  /05  on  purchase  of  HP  BladeSystem  enclosure  and  eight  BiadeSystem  Management  Suite  licenses.  Offers  valid  in  U.S.  only.  Offers  cannot  be  combined  with  any  other  offeror  discount  and  are  good  while  supplies  last.  See  Web  site  for  full  details. 
Linux  isa  US.  registered  trademark  of  LinusTorvalds.  Oracle  isa  registered  U.S.  trademark  of  Oracle  Corporation,  Redwood  City,  California.  AMD,  the  AMDArrow  Logo,  AMD  Opteron  and  combinations  thereof  are  trademarks  of  Advanced  Micro  Devices,  Inc.  ©2005  Hewlett-Packard  Development  Company,  L.P. 


